# CVEs published 2013-04-04

14 CVEs were published on April 4, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-0125](https://cve.now/CVE-2013-0125.md): Cross-site scripting (XSS) vulnerability in fileview.asp in C2 WebResource allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2013-0128](https://cve.now/CVE-2013-0128.md): The Contact Customer Support feature in the TigerText Free Private Texting app before 3.1.402 for iOS sends a log-file e-mail message with u (no CVSS)
- [CVE-2013-2302](https://cve.now/CVE-2013-2302.md): TransWARE Active! mail 6, when an external public interface is used, allows local users to obtain sensitive information belonging to arbitra (no CVSS)
- [CVE-2013-1899](https://cve.now/CVE-2013-1899.md): Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows remote attackers to ca (no CVSS)
- [CVE-2013-1900](https://cve.now/CVE-2013-1900.md): PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, and 8.4.x before 8.4.17, when using OpenSSL, generates insufficientl (no CVSS)
- [CVE-2013-1901](https://cve.now/CVE-2013-1901.md): PostgreSQL 9.2.x before 9.2.4 and 9.1.x before 9.1.9 does not properly check REPLICATION privileges, which allows remote authenticated users (no CVSS)
- [CVE-2013-1902](https://cve.now/CVE-2013-1902.md): PostgreSQL, 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 generates insecure tem (no CVSS)
- [CVE-2013-1903](https://cve.now/CVE-2013-1903.md): PostgreSQL, possibly 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 incorrectly p (no CVSS)
- [CVE-2012-4710](https://cve.now/CVE-2012-4710.md): Invensys Wonderware Win-XML Exporter 1522.148.0.0 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, o (no CVSS)
- [CVE-2013-0663](https://cve.now/CVE-2013-0663.md): Cross-site request forgery (CSRF) vulnerability on the Schneider Electric Quantum 140NOE77111, 140NOE77101, and 140NWM10000; M340 BMXNOC0401 (no CVSS)
- [CVE-2013-0664](https://cve.now/CVE-2013-0664.md): The FactoryCast service on the Schneider Electric Quantum 140NOE77111 and 140NWM10000, M340 BMXNOE0110x, and Premium TSXETY5103 PLC modules (no CVSS)
- [CVE-2013-2761](https://cve.now/CVE-2013-2761.md): The Schneider Electric M340 BMXNOE01xx and BMXP3420xx PLC modules allow remote authenticated users to cause a denial of service (module cras (no CVSS)
- [CVE-2013-2762](https://cve.now/CVE-2013-2762.md): The Schneider Electric Magelis XBT HMI controller has a default password for authentication of configuration uploads, which makes it easier (no CVSS)
- [CVE-2013-2763](https://cve.now/CVE-2013-2763.md): The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-04-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.