# CVEs published 2013-03-22 20 CVEs were published on March 22, 2013: 0 critical, 1 high. Days are UTC. - [CVE-2013-0335](https://cve.now/CVE-2013-0335.md): Openstack nova: vnc proxy can connect to the wrong vm (CVSS 7.6, Red Hat OpenStack Folsom for RHEL · Red Hat OpenStack Pl… +1) - [CVE-2013-1838](https://cve.now/CVE-2013-1838.md): OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote (no CVSS, nova) - [CVE-2013-1840](https://cve.now/CVE-2013-1840.md): Openstack glance: swift: s3: openstack glance: information disclosure of backend credentials via cached image request (CVSS 6.5, Red Hat OpenStack Folsom for RHEL · Red Hat OpenStack Pl… +1) - [CVE-2013-1865](https://cve.now/CVE-2013-1865.md): OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which all (no CVSS, keystone) - [CVE-2013-2501](https://cve.now/CVE-2013-2501.md): Cross-site scripting (XSS) vulnerability in the Terillion Reviews plugin before 1.2 for WordPress allows remote attackers to inject arbitrar (no CVSS) - [CVE-2013-2640](https://cve.now/CVE-2013-2640.md): ajax.functions.php in the MailUp plugin before 1.3.2 for WordPress does not properly restrict access to unspecified Ajax functions, which al (no CVSS) - [CVE-2013-0731](https://cve.now/CVE-2013-0731.md): ajax.functions.php in the MailUp plugin before 1.3.3 for WordPress does not properly restrict access to unspecified Ajax functions, which al (no CVSS) - [CVE-2013-0914](https://cve.now/CVE-2013-0914.md): The flush\_signal\_handlers function in kernel/signal.c in the Linux kernel before 3.8.4 preserves the value of the sa\_restorer field across a (no CVSS) - [CVE-2013-1792](https://cve.now/CVE-2013-1792.md): Race condition in the install\_user\_keyrings function in security/keys/process\_keys.c in the Linux kernel before 3.8.3 allows local users to (no CVSS) - [CVE-2013-1796](https://cve.now/CVE-2013-1796.md): The kvm\_set\_msr\_common function in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 does not ensure a required time\_page alignment durin (no CVSS) - [CVE-2013-1797](https://cve.now/CVE-2013-1797.md): Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 allows guest OS users to cause a denial of service (hos (no CVSS) - [CVE-2013-1798](https://cve.now/CVE-2013-1798.md): The ioapic\_read\_indirect function in virt/kvm/ioapic.c in the Linux kernel through 3.8.4 does not properly handle a certain combination of i (no CVSS) - [CVE-2013-1826](https://cve.now/CVE-2013-1826.md): The xfrm\_state\_netlink function in net/xfrm/xfrm\_user.c in the Linux kernel before 3.5.7 does not properly handle error conditions in dump\_o (no CVSS) - [CVE-2013-1827](https://cve.now/CVE-2013-1827.md): net/dccp/ccid.h in the Linux kernel before 3.5.4 allows local users to gain privileges or cause a denial of service (NULL pointer dereferenc (no CVSS) - [CVE-2013-1828](https://cve.now/CVE-2013-1828.md): The sctp\_getsockopt\_assoc\_stats function in net/sctp/socket.c in the Linux kernel before 3.8.4 does not validate a size value before proceed (no CVSS) - [CVE-2013-1848](https://cve.now/CVE-2013-1848.md): fs/ext3/super.c in the Linux kernel before 3.8.4 uses incorrect arguments to functions in certain circumstances related to printk input, whi (no CVSS) - [CVE-2013-1860](https://cve.now/CVE-2013-1860.md): Heap-based buffer overflow in the wdm\_in\_callback function in drivers/usb/class/cdc-wdm.c in the Linux kernel before 3.8.4 allows physically (no CVSS) - [CVE-2013-2634](https://cve.now/CVE-2013-2634.md): net/dcb/dcbnl.c in the Linux kernel before 3.8.4 does not initialize certain structures, which allows local users to obtain sensitive inform (no CVSS) - [CVE-2013-2635](https://cve.now/CVE-2013-2635.md): The rtnl\_fill\_ifinfo function in net/core/rtnetlink.c in the Linux kernel before 3.8.4 does not initialize a certain structure member, which (no CVSS) - [CVE-2013-2636](https://cve.now/CVE-2013-2636.md): net/bridge/br\_mdb.c in the Linux kernel before 3.8.4 does not initialize certain structures, which allows local users to obtain sensitive in (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-03-22 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.