# CVEs published 2013-04-10

15 CVEs were published on April 10, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-0927](https://cve.now/CVE-2013-0927.md): Google Chrome OS before 26.0.1410.57 relies on a Pango pango-utils.c read\_config implementation that loads the contents of the .pangorc file (no CVSS)
- [CVE-2012-6120](https://cve.now/CVE-2012-6120.md): Red Hat OpenStack Essex and Folsom creates the /var/log/puppet directory with world-readable permissions, which allows local users to obtain (no CVSS)
- [CVE-2013-1815](https://cve.now/CVE-2013-1815.md): Packstack: red hat openstack: packstack: unauthorized system modification via insecure answer file creation (CVSS 6.1, Red Hat OpenStack Folsom for RHEL · Red Hat Enterprise L… +1)
- [CVE-2013-1912](https://cve.now/CVE-2013-1912.md): Buffer overflow in HAProxy 1.4 through 1.4.22 and 1.5-dev through 1.5-dev17, when HTTP keep-alive is enabled, using HTTP keywords in TCP ins (no CVSS)
- [CVE-2013-2716](https://cve.now/CVE-2013-2716.md): Puppet Labs Puppet Enterprise before 2.8.0 does not use a "randomized secret" in the CAS client config file (cas\_client\_config.yml) when upg (no CVSS)
- [CVE-2013-2766](https://cve.now/CVE-2013-2766.md): Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk 4.3.0 through 4.3.5 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2013-1378](https://cve.now/CVE-2013-1378.md): Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 (no CVSS)
- [CVE-2013-1379](https://cve.now/CVE-2013-1379.md): Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 (no CVSS)
- [CVE-2013-1380](https://cve.now/CVE-2013-1380.md): Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 (no CVSS)
- [CVE-2013-1383](https://cve.now/CVE-2013-1383.md): Buffer overflow in Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code via unspecified vectors. (no CVSS)
- [CVE-2013-1384](https://cve.now/CVE-2013-1384.md): Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns (no CVSS)
- [CVE-2013-1385](https://cve.now/CVE-2013-1385.md): Adobe Shockwave Player before 12.0.2.122 does not prevent access to address information, which makes it easier for attackers to bypass the A (no CVSS)
- [CVE-2013-1386](https://cve.now/CVE-2013-1386.md): Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via uns (no CVSS)
- [CVE-2013-1387](https://cve.now/CVE-2013-1387.md): Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 10, 9.0.1 before Update 9, 9.0.2 before Update 4, and 10 before Update 9 all (no CVSS)
- [CVE-2013-1388](https://cve.now/CVE-2013-1388.md): Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 10, 9.0.1 before Update 9, 9.0.2 before Update 4, and 10 before Update 9 all (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-04-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.