# CVEs published 2013-04-18

14 CVEs were published on April 18, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-0132](https://cve.now/CVE-2013-0132.md): The suexec implementation in Parallels Plesk Panel 11.0.9 contains a cgi-wrapper whitelist entry, which allows user-assisted remote attacker (no CVSS)
- [CVE-2013-0133](https://cve.now/CVE-2013-0133.md): Untrusted search path vulnerability in /usr/local/psa/admin/sbin/wrapper in Parallels Plesk Panel 11.0.9 allows local users to gain privileg (no CVSS)
- [CVE-2013-0139](https://cve.now/CVE-2013-0139.md): The Arecont Vision AV1355DN MegaDome camera allows remote attackers to cause a denial of service (video-capture outage) via a packet to UDP (no CVSS)
- [CVE-2013-1176](https://cve.now/CVE-2013-1176.md): The DSP card on Cisco TelePresence MCU 4500 and 4501 devices before 4.3(2.30), TelePresence MCU MSE 8510 devices before 4.3(2.30), and TeleP (no CVSS)
- [CVE-2013-1177](https://cve.now/CVE-2013-1177.md): SQL injection vulnerability in Cisco Network Admission Control (NAC) Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers t (no CVSS)
- [CVE-2013-1194](https://cve.now/CVE-2013-1194.md): The ISAKMP implementation on Cisco Adaptive Security Appliances (ASA) devices generates different responses for IKE aggressive-mode messages (no CVSS)
- [CVE-2013-1199](https://cve.now/CVE-2013-1199.md): Race condition in the CIFS implementation in the rewriter module in the Clientless SSL VPN component on Cisco Adaptive Security Appliances ( (no CVSS)
- [CVE-2012-4715](https://cve.now/CVE-2012-4715.md): Buffer overflow in LogReceiver.exe in Rockwell Automation RSLinx Enterprise CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5 (no CVSS)
- [CVE-2013-1748](https://cve.now/CVE-2013-1748.md): Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via unspecified pa (no CVSS)
- [CVE-2013-1749](https://cve.now/CVE-2013-1749.md): Cross-site scripting (XSS) vulnerability in edit.php in PHP Address Book 8.2.5 allows user-assisted remote attackers to inject arbitrary web (no CVSS)
- [CVE-2012-4695](https://cve.now/CVE-2012-4695.md): LogReceiver.exe in Rockwell Automation RSLinx Enterprise CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 al (no CVSS)
- [CVE-2012-4713](https://cve.now/CVE-2012-4713.md): Integer signedness error in RNADiagnostics.dll in Rockwell Automation FactoryTalk Services Platform (FTSP) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR (no CVSS)
- [CVE-2012-4714](https://cve.now/CVE-2012-4714.md): Integer overflow in RNADiagnostics.dll in Rockwell Automation FactoryTalk Services Platform (FTSP) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9- (no CVSS)
- [CVE-2013-0687](https://cve.now/CVE-2013-0687.md): The installer routine in Schneider Electric MiCOM S1 Studio uses world-writable permissions for executable files, which allows local users t (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-04-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.