# CVEs published 2013-04-03 19 CVEs were published on April 3, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2013-0788](https://cve.now/CVE-2013-0788.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird befor (no CVSS) - [CVE-2013-0789](https://cve.now/CVE-2013-0789.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 20.0 and SeaMonkey before 2.17 allow remote attackers t (no CVSS) - [CVE-2013-0790](https://cve.now/CVE-2013-0790.md): Unspecified vulnerability in the browser engine in Mozilla Firefox before 20.0 on Android allows remote attackers to cause a denial of servi (no CVSS) - [CVE-2013-0791](https://cve.now/CVE-2013-0791.md): The CERT\_DecodeCertPackage function in Mozilla Network Security Services (NSS), as used in Mozilla Firefox before 20.0, Firefox ESR 17.x bef (no CVSS) - [CVE-2013-0792](https://cve.now/CVE-2013-0792.md): Mozilla Firefox before 20.0 and SeaMonkey before 2.17, when gfx.color\_management.enablev4 is used, do not properly handle color profiles dur (no CVSS) - [CVE-2013-0793](https://cve.now/CVE-2013-0793.md): Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey be (no CVSS) - [CVE-2013-0794](https://cve.now/CVE-2013-0794.md): Mozilla Firefox before 20.0 and SeaMonkey before 2.17 do not prevent origin spoofing of tab-modal dialogs, which allows remote attackers to (no CVSS) - [CVE-2013-0795](https://cve.now/CVE-2013-0795.md): The System Only Wrapper (SOW) implementation in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thun (no CVSS) - [CVE-2013-0796](https://cve.now/CVE-2013-0796.md): The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 1 (no CVSS) - [CVE-2013-0797](https://cve.now/CVE-2013-0797.md): Untrusted search path vulnerability in the Mozilla Updater in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird befor (no CVSS) - [CVE-2013-0798](https://cve.now/CVE-2013-0798.md): Mozilla Firefox before 20.0 on Android uses world-writable and world-readable permissions for the app\_tmp installation directory in the loca (no CVSS) - [CVE-2013-0799](https://cve.now/CVE-2013-0799.md): Buffer overflow in the Mozilla Maintenance Service in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5 (no CVSS) - [CVE-2013-0800](https://cve.now/CVE-2013-0800.md): Integer signedness error in the pixman\_fill\_sse2 function in pixman-sse2.c in Pixman, as distributed with Cairo and used in Mozilla Firefox (no CVSS) - [CVE-2012-1038](https://cve.now/CVE-2012-1038.md): Cross-site scripting (XSS) vulnerability in the WebAAA login functionality (wba\_login.html) in Juniper Networks Mobility System Software (MS (no CVSS) - [CVE-2012-4546](https://cve.now/CVE-2012-4546.md): The default configuration for IPA servers in Red Hat Enterprise Linux 6, when revoking a certificate from an Identity Management replica, do (no CVSS) - [CVE-2012-6129](https://cve.now/CVE-2012-6129.md): Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers t (no CVSS) - [CVE-2013-1664](https://cve.now/CVE-2013-1664.md): The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Esse (no CVSS, django) - [CVE-2013-1665](https://cve.now/CVE-2013-1665.md): The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex and Folsom, Django, and possibly other pr (no CVSS, django) - [CVE-2013-1911](https://cve.now/CVE-2013-1911.md): lib/ldoce/word.rb in the ldoce 0.0.2 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in (1) an m (no CVSS, ldoce) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-04-03 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.