# CVEs published 2013-03-28

35 CVEs were published on March 28, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2012-0553](https://cve.now/CVE-2012-0553.md): Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.28, has unspecified impact and attack vectors, a differe (no CVSS)
- [CVE-2012-5216](https://cve.now/CVE-2012-5216.md): Cross-site request forgery (CSRF) vulnerability on HP ProCurve 1700-8 (aka J9079A) switches with software before VA.02.09 and 1700-24 (aka J (no CVSS)
- [CVE-2012-5879](https://cve.now/CVE-2012-5879.md): An ActiveX control in McHealthCheck.dll in McAfee Virtual Technician (MVT) and ePO-MVT 6.5.0.2101 and earlier allows remote attackers to mod (no CVSS)
- [CVE-2013-1142](https://cve.now/CVE-2013-1142.md): Race condition in the VRF-aware NAT feature in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 allows remote attackers to cause a denial o (no CVSS)
- [CVE-2013-1143](https://cve.now/CVE-2013-1143.md): The RSVP protocol implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3 (no CVSS)
- [CVE-2013-1144](https://cve.now/CVE-2013-1144.md): Memory leak in the IKEv1 implementation in Cisco IOS 15.1 allows remote attackers to cause a denial of service (memory consumption) via unsp (no CVSS)
- [CVE-2013-1145](https://cve.now/CVE-2013-1145.md): Memory leak in Cisco IOS 12.2, 12.4, 15.0, and 15.1, when Zone-Based Policy Firewall SIP application layer gateway inspection is enabled, al (no CVSS)
- [CVE-2013-1146](https://cve.now/CVE-2013-1146.md): The Smart Install client functionality in Cisco IOS 12.2 and 15.0 through 15.3 on Catalyst switches allows remote attackers to cause a denia (no CVSS)
- [CVE-2013-1147](https://cve.now/CVE-2013-1147.md): The Protocol Translation (PT) functionality in Cisco IOS 12.3 through 12.4 and 15.0 through 15.3, when one-step port-23 translation or a Tel (no CVSS)
- [CVE-2013-1148](https://cve.now/CVE-2013-1148.md): The General Responder implementation in the IP Service Level Agreement (SLA) feature in Cisco IOS 15.2 and IOS XE 3.1.xS through 3.4.xS befo (no CVSS)
- [CVE-2013-1492](https://cve.now/CVE-2013-1492.md): Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.30, has unspecified impact and attack vectors, a differe (no CVSS)
- [CVE-2013-1747](https://cve.now/CVE-2013-1747.md): channel.c in ngIRCd 20 and 20.1 allows remote attackers to cause a denial of service (assertion failure and crash) via a KICK command for a (no CVSS)
- [CVE-2013-1861](https://cve.now/CVE-2013-1861.md): MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 (no CVSS)
- [CVE-2013-2290](https://cve.now/CVE-2013-2290.md): Cross-site scripting (XSS) vulnerability in the dashboard of the ArubaOS Administration WebUI in Aruba Networks ArubaOS 6.2.x before 6.2.0.3 (no CVSS)
- [CVE-2013-2690](https://cve.now/CVE-2013-2690.md): SQL injection vulnerability in index.php in Synchroweb Technology SynConnect 2.0 allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2012-6550](https://cve.now/CVE-2012-6550.md): Cross-site scripting (XSS) vulnerability in ZeroClipboard before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via "t (no CVSS)
- [CVE-2013-0240](https://cve.now/CVE-2013-0240.md): Gnome Online Accounts (GOA) 3.4.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.5, does not properly validate SSL certificates when creating acc (no CVSS)
- [CVE-2013-1799](https://cve.now/CVE-2013-1799.md): Gnome Online Accounts (GOA) 3.6.x before 3.6.3 and 3.7.x before 3.7.91, does not properly validate SSL certificates when creating accounts f (no CVSS)
- [CVE-2013-1808](https://cve.now/CVE-2013-1808.md): Cross-site scripting (XSS) vulnerability in ZeroClipboard.swf and ZeroClipboard10.swf in ZeroClipboard before 1.0.8, as used in em-shorty, R (no CVSS)
- [CVE-2013-2266](https://cve.now/CVE-2013-2266.md): libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms (no CVSS)
- [CVE-2013-2494](https://cve.now/CVE-2013-2494.md): libdns in ISC DHCP 4.2.x before 4.2.5-P1 allows remote name servers to cause a denial of service (memory consumption) via vectors involving (no CVSS)
- [CVE-2013-0935](https://cve.now/CVE-2013-0935.md): EMC Smarts Network Configuration Manager (NCM) before 9.2 does not require authentication for all Java RMI method calls, which allows remote (no CVSS)
- [CVE-2013-0936](https://cve.now/CVE-2013-0936.md): Cross-site scripting (XSS) vulnerability in EMC Smarts IP Manager, Smarts Service Assurance Manager, Smarts Server Manager, Smarts VoIP Avai (no CVSS)
- [CVE-2013-2717](https://cve.now/CVE-2013-2717.md): Multiple unspecified vulnerabilities in the System Management (aka SysAdmin) Console in EMC Smarts Network Configuration Manager (NCM) throu (no CVSS)
- [CVE-2013-0916](https://cve.now/CVE-2013-0916.md): Use-after-free vulnerability in the Web Audio implementation in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial (no CVSS)
- [CVE-2013-0917](https://cve.now/CVE-2013-0917.md): The URL loader in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecifie (no CVSS)
- [CVE-2013-0918](https://cve.now/CVE-2013-0918.md): Google Chrome before 26.0.1410.43 does not prevent navigation to developer tools in response to a drag-and-drop operation, which allows user (no CVSS)
- [CVE-2013-0919](https://cve.now/CVE-2013-0919.md): Use-after-free vulnerability in Google Chrome before 26.0.1410.43 on Linux allows remote attackers to cause a denial of service or possibly (no CVSS)
- [CVE-2013-0920](https://cve.now/CVE-2013-0920.md): Use-after-free vulnerability in the extension bookmarks API in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial o (no CVSS)
- [CVE-2013-0921](https://cve.now/CVE-2013-0921.md): The Isolated Sites feature in Google Chrome before 26.0.1410.43 does not properly enforce the use of separate processes, which makes it easi (no CVSS)
- [CVE-2013-0922](https://cve.now/CVE-2013-0922.md): Google Chrome before 26.0.1410.43 does not properly restrict brute-force access attempts against web sites that require HTTP Basic Authentic (no CVSS)
- [CVE-2013-0923](https://cve.now/CVE-2013-0923.md): The USB Apps API in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service (memory corruption) via unspecifi (no CVSS)
- [CVE-2013-0924](https://cve.now/CVE-2013-0924.md): The extension functionality in Google Chrome before 26.0.1410.43 does not verify that use of the permissions API is consistent with file per (no CVSS)
- [CVE-2013-0925](https://cve.now/CVE-2013-0925.md): Google Chrome before 26.0.1410.43 does not ensure that an extension has the tabs (aka APIPermission::kTab) permission before providing a URL (no CVSS)
- [CVE-2013-0926](https://cve.now/CVE-2013-0926.md): Google Chrome before 26.0.1410.43 does not properly handle active content in an EMBED element during a copy-and-paste operation, which allow (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-03-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.