CVEs published March 22, 2013
20 CVEs were published on March 22, 2013: 0 critical, 1 high.
- Published
- 20
- Critical
- 0
- High
- 1
- Medium
- 1
- Low
- 0
- Unrated
- 18
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- Red Hat OpenStack Folsom for RHEL · Red Hat OpenStack Pl… +1
- 2
- keystone
- 1
- nova
- 1
High 1
Medium, low and unrated 19
- CVE-2013-1838OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remotenova
- CVE-2013-1840Openstack glance: swift: s3: openstack glance: information disclosure of backend credentials via cached image requestRed Hat OpenStack Folsom for RHEL · Red Hat OpenStack Pl… +1
- CVE-2013-1865OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allkeystone
- CVE-2013-2501Cross-site scripting (XSS) vulnerability in the Terillion Reviews plugin before 1.2 for WordPress allows remote attackers to inject arbitrar
- CVE-2013-2640ajax.functions.php in the MailUp plugin before 1.3.2 for WordPress does not properly restrict access to unspecified Ajax functions, which al
- CVE-2013-0731ajax.functions.php in the MailUp plugin before 1.3.3 for WordPress does not properly restrict access to unspecified Ajax functions, which al
- CVE-2013-0914The flush_signal_handlers function in kernel/signal.c in the Linux kernel before 3.8.4 preserves the value of the sa_restorer field across a
- CVE-2013-1792Race condition in the install_user_keyrings function in security/keys/process_keys.c in the Linux kernel before 3.8.3 allows local users to
- CVE-2013-1796The kvm_set_msr_common function in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 does not ensure a required time_page alignment durin
- CVE-2013-1797Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 allows guest OS users to cause a denial of service (hos
- CVE-2013-1798The ioapic_read_indirect function in virt/kvm/ioapic.c in the Linux kernel through 3.8.4 does not properly handle a certain combination of i
- CVE-2013-1826The xfrm_state_netlink function in net/xfrm/xfrm_user.c in the Linux kernel before 3.5.7 does not properly handle error conditions in dump_o
- CVE-2013-1827net/dccp/ccid.h in the Linux kernel before 3.5.4 allows local users to gain privileges or cause a denial of service (NULL pointer dereferenc
- CVE-2013-1828The sctp_getsockopt_assoc_stats function in net/sctp/socket.c in the Linux kernel before 3.8.4 does not validate a size value before proceed
- CVE-2013-1848fs/ext3/super.c in the Linux kernel before 3.8.4 uses incorrect arguments to functions in certain circumstances related to printk input, whi
- CVE-2013-1860Heap-based buffer overflow in the wdm_in_callback function in drivers/usb/class/cdc-wdm.c in the Linux kernel before 3.8.4 allows physically
- CVE-2013-2634net/dcb/dcbnl.c in the Linux kernel before 3.8.4 does not initialize certain structures, which allows local users to obtain sensitive inform
- CVE-2013-2635The rtnl_fill_ifinfo function in net/core/rtnetlink.c in the Linux kernel before 3.8.4 does not initialize a certain structure member, which
- CVE-2013-2636net/bridge/br_mdb.c in the Linux kernel before 3.8.4 does not initialize certain structures, which allows local users to obtain sensitive in