# CVEs published 2013-03-21 27 CVEs were published on March 21, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2013-0123](https://cve.now/CVE-2013-0123.md): Multiple SQL injection vulnerabilities in the administration interface in ASKIA askiaweb allow remote attackers to execute arbitrary SQL com (no CVSS) - [CVE-2013-0124](https://cve.now/CVE-2013-0124.md): Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in ASKIA askiaweb allow remote attackers to inject arbit (no CVSS) - [CVE-2013-1844](https://cve.now/CVE-2013-1844.md): Cross-site scripting (XSS) vulnerability in Piwik before 1.11 allows remote attackers to inject arbitrary web script or HTML via unspecified (no CVSS, matomo/matomo · piwik/piwik) - [CVE-2013-2632](https://cve.now/CVE-2013-2632.md): Google V8 before 3.17.13, as used in Google Chrome before 27.0.1444.3, allows remote attackers to cause a denial of service (application cra (no CVSS) - [CVE-2013-2633](https://cve.now/CVE-2013-2633.md): Piwik before 1.11 accepts input from a POST request instead of a GET request in unspecified circumstances, which might allow attackers to ob (no CVSS, matomo/matomo · piwik/piwik) - [CVE-2012-5757](https://cve.now/CVE-2012-5757.md): Cross-site scripting (XSS) vulnerability in the Web Client in IBM Rational ClearQuest 7.1.x before 7.1.2.10 and 8.x before 8.0.0.6 allows re (no CVSS) - [CVE-2013-0126](https://cve.now/CVE-2013-0126.md): Multiple cross-site request forgery (CSRF) vulnerabilities in index.cgi on the Verizon FIOS Actiontec MI424WR-GEN3I router with firmware 40. (no CVSS) - [CVE-2013-0453](https://cve.now/CVE-2013-0453.md): Cross-site scripting (XSS) vulnerability in Web Reports in IBM Tivoli Endpoint Manager (TEM) before 8.2.1372 allows remote authenticated use (no CVSS) - [CVE-2013-1051](https://cve.now/CVE-2013-1051.md): apt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which allows man-in-the-middle attackers to modify (no CVSS) - [CVE-2013-1052](https://cve.now/CVE-2013-1052.md): pam-xdg-support, as used in Ubuntu 12.10, does not properly handle the PATH environment variable, which allows local users to gain privilege (no CVSS) - [CVE-2013-1427](https://cve.now/CVE-2013-1427.md): The configuration file for the FastCGI PHP support for lighttpd before 1.4.28 on Debian GNU/Linux creates a socket file with a predictable n (no CVSS) - [CVE-2013-2279](https://cve.now/CVE-2013-2279.md): CA SiteMinder Federation (FSS) 12.5, 12.0, and r6; Federation (Standalone) 12.1 and 12.0; Agent for SharePoint 2010; and SiteMinder for Secu (no CVSS) - [CVE-2013-0287](https://cve.now/CVE-2013-0287.md): The Simple Access Provider in System Security Services Daemon (SSSD) 1.9.0 through 1.9.4, when the Active Directory provider is used, does n (no CVSS) - [CVE-2013-0674](https://cve.now/CVE-2013-0674.md): Buffer overflow in the RegReader ActiveX control in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, all (no CVSS) - [CVE-2013-0675](https://cve.now/CVE-2013-0675.md): Buffer overflow in CCEServer (aka the central communications component) in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 (no CVSS) - [CVE-2013-0676](https://cve.now/CVE-2013-0676.md): Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, does not properly assign privileges for the database co (no CVSS) - [CVE-2013-0677](https://cve.now/CVE-2013-0677.md): The web server in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, allows remote attackers to obtain sen (no CVSS) - [CVE-2013-0678](https://cve.now/CVE-2013-0678.md): Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, does not properly represent WebNavigator credentials in (no CVSS) - [CVE-2013-0679](https://cve.now/CVE-2013-0679.md): Directory traversal vulnerability in the web server in Siemens WinCC before 7.2, as used in SIMATIC PCS7 before 8.0 SP1 and other products, (no CVSS) - [CVE-2011-4515](https://cve.now/CVE-2011-4515.md): Siemens WinCC (TIA Portal) 11 uses a reversible algorithm for storing HMI web-application passwords in world-readable and world-writable fil (no CVSS) - [CVE-2013-0665](https://cve.now/CVE-2013-0665.md): Schweitzer Engineering Laboratories (SEL) AcSELerator QuickSet before 5.12.0.1 uses weak permissions for its Program Files directory, which (no CVSS) - [CVE-2013-0667](https://cve.now/CVE-2013-0667.md): Cross-site scripting (XSS) vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote attackers to inject arbit (no CVSS) - [CVE-2013-0668](https://cve.now/CVE-2013-0668.md): Multiple cross-site scripting (XSS) vulnerabilities in the HMI web application in Siemens WinCC (TIA Portal) 11 allow remote attackers to in (no CVSS) - [CVE-2013-0669](https://cve.now/CVE-2013-0669.md): The HMI web application in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to cause a denial of service (daemon crash) via a (no CVSS) - [CVE-2013-0670](https://cve.now/CVE-2013-0670.md): CRLF injection vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote attackers to inject arbitrary HTTP he (no CVSS) - [CVE-2013-0671](https://cve.now/CVE-2013-0671.md): Directory traversal vulnerability in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to read HMI web-application source code (no CVSS) - [CVE-2013-0672](https://cve.now/CVE-2013-0672.md): Cross-site scripting (XSS) vulnerability in the HMI web application in Siemens WinCC (TIA Portal) 11 allows remote authenticated users to in (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-03-21 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.