# CVEs published 2013-03-29

21 CVEs were published on March 29, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-0659](https://cve.now/CVE-2013-0659.md): The debugging feature on the Siemens CP 1604 and CP 1616 interface cards with firmware before 2.5.2 allows remote attackers to execute arbit (no CVSS)
- [CVE-2013-2264](https://cve.now/CVE-2013-2264.md): The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 (no CVSS)
- [CVE-2013-2685](https://cve.now/CVE-2013-2685.md): Stack-based buffer overflow in res/res\_format\_attr\_h264.c in Asterisk Open Source 11.x before 11.2.2 allows remote attackers to execute arbi (no CVSS)
- [CVE-2013-2686](https://cve.now/CVE-2013-2686.md): main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asteris (no CVSS)
- [CVE-2013-0130](https://cve.now/CVE-2013-0130.md): Multiple buffer overflows in Core FTP before 2.2 build 1769 allow remote FTP servers to execute arbitrary code or cause a denial of service (no CVSS)
- [CVE-2012-6534](https://cve.now/CVE-2012-6534.md): Novell Sentinel Log Manager before 1.2.0.3 allows remote attackers to create data retention policies via a crafted text/x-gwt-rpc request to (no CVSS)
- [CVE-2013-0452](https://cve.now/CVE-2013-0452.md): Cross-site request forgery (CSRF) vulnerability in the Software Use Analysis (SUA) application before 1.3.3 in IBM Tivoli Endpoint Manager 8 (no CVSS)
- [CVE-2013-0473](https://cve.now/CVE-2013-0473.md): Multiple cross-site scripting (XSS) vulnerabilities in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester (no CVSS)
- [CVE-2013-0474](https://cve.now/CVE-2013-0474.md): The Manual Explore browser plug-in in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x befo (no CVSS)
- [CVE-2013-0510](https://cve.now/CVE-2013-0510.md): IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 includes a security test that sends session cookies to a specific external server, wh (no CVSS)
- [CVE-2013-0511](https://cve.now/CVE-2013-0511.md): Multiple SQL injection vulnerabilities in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 allow remote authenticated users to execute (no CVSS)
- [CVE-2013-0512](https://cve.now/CVE-2013-0512.md): Stack-based buffer overflow in the Manual Explore browser plug-in for Firefox in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and (no CVSS)
- [CVE-2013-0513](https://cve.now/CVE-2013-0513.md): IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 create a service that lacks (no CVSS)
- [CVE-2013-0532](https://cve.now/CVE-2013-0532.md): Cross-site request forgery (CSRF) vulnerability in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 (no CVSS)
- [CVE-2013-1079](https://cve.now/CVE-2013-1079.md): Directory traversal vulnerability in the ISCreateObject method in an ActiveX control in InstallShield\\ISProxy.dll in AdminStudio in Novell Z (no CVSS)
- [CVE-2013-1080](https://cve.now/CVE-2013-1080.md): The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform authentication for ze (no CVSS)
- [CVE-2013-1082](https://cve.now/CVE-2013-1082.md): Directory traversal vulnerability in DUSAP.php in Novell ZENworks Mobile Management before 2.7.1 allows remote attackers to include and exec (no CVSS)
- [CVE-2013-1083](https://cve.now/CVE-2013-1083.md): Unspecified vulnerability in the login functionality in the Reporting Module in Novell Identity Manager (aka IDM) Roles Based Provisioning M (no CVSS)
- [CVE-2013-1085](https://cve.now/CVE-2013-1085.md): Stack-based buffer overflow in the nim: protocol handler in Novell GroupWise Messenger 2.04 and earlier, and Novell Messenger 2.1.x and 2.2. (no CVSS)
- [CVE-2013-1299](https://cve.now/CVE-2013-1299.md): Microsoft Windows Modern Mail allows remote attackers to spoof link targets via a crafted HTML e-mail message. (no CVSS)
- [CVE-2013-2301](https://cve.now/CVE-2013-2301.md): The OMRON OpenWnn application before 1.3.6 for Android uses weak permissions for unspecified files, which allows attackers to obtain sensiti (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-03-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.