# CVEs published 2013-04-16

14 CVEs were published on April 16, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-2832](https://cve.now/CVE-2013-2832.md): The Buffer::Set function in core/cross/buffer.cc in the O3D plug-in in Google Chrome OS before 26.0.1410.57 does not prevent uninitialized d (no CVSS)
- [CVE-2013-2833](https://cve.now/CVE-2013-2833.md): Use-after-free vulnerability in the O3D plug-in in Google Chrome OS before 26.0.1410.57 allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2013-2834](https://cve.now/CVE-2013-2834.md): Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote (no CVSS)
- [CVE-2013-2835](https://cve.now/CVE-2013-2835.md): Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote (no CVSS)
- [CVE-2012-3022](https://cve.now/CVE-2012-3022.md): The SaveToFile method in a certain ActiveX control in TrendDisplay.dll in Canary Labs TrendLink 9.0.2.27051 and earlier does not properly re (no CVSS)
- [CVE-2012-4829](https://cve.now/CVE-2012-4829.md): IBM XIV Storage System Gen3 before 11.2 relies on a default X.509 v3 certificate for authentication, which allows man-in-the-middle attacker (no CVSS)
- [CVE-2012-5415](https://cve.now/CVE-2012-5415.md): Race condition on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (CPU consumption or (no CVSS)
- [CVE-2013-1187](https://cve.now/CVE-2013-1187.md): The Connection Manager in Cisco Jabber Extensible Communications Platform (aka Jabber XCP) does not properly validate login data, which allo (no CVSS)
- [CVE-2013-1193](https://cve.now/CVE-2013-1193.md): The Secure Shell (SSH) implementation on Cisco Adaptive Security Appliances (ASA) devices, and in Cisco Firewall Services Module (FWSM), doe (no CVSS)
- [CVE-2013-1197](https://cve.now/CVE-2013-1197.md): The XML parser in the server in Cisco Unified Presence (CUP) allows remote authenticated users to cause a denial of service (jabberd daemon (no CVSS)
- [CVE-2013-1937](https://cve.now/CVE-2013-1937.md): Multiple cross-site scripting (XSS) vulnerabilities in tbl\_gis\_visualization.php in phpMyAdmin 3.5.x before 3.5.8 might allow remote attacke (no CVSS)
- [CVE-2013-2303](https://cve.now/CVE-2013-2303.md): Sleipnir 4.0.0.4000 and earlier on Windows allows remote attackers to spoof the SSL lock icon and address-bar colors via unspecified vectors (no CVSS)
- [CVE-2013-2304](https://cve.now/CVE-2013-2304.md): The Sleipnir Mobile application 2.8.0 and earlier and Sleipnir Mobile Black Edition application 2.8.0 and earlier for Android allow remote a (no CVSS)
- [CVE-2013-2760](https://cve.now/CVE-2013-2760.md): Buffer overflow in Groovy Media Player 3.2.0 allows remote attackers to execute arbitrary code via a long string in a .m3u file. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-04-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.