CVEs published April 2, 2013
6 CVEs were published on April 2, 2013: 0 critical, 0 high.
- Published
- 6
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 6
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 6
- CVE-2012-6119Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allo
- CVE-2013-1823Cross-site scripting (XSS) vulnerability in the Notifications form in Red Hat Subscription Asset Manager before 1.2.1 allows remote attacker
- CVE-2013-2741importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress does not require that authentication be enab
- CVE-2013-2742importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress does not reliably delete itself after comple
- CVE-2013-2743importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress allows remote attackers to bypass authentica
- CVE-2013-2744importbuddy.php in the BackupBuddy plugin 2.2.25 for WordPress allows remote attackers to obtain configuration information via a step 0 phpi