# CVEs published 2013-04-24

16 CVEs were published on April 24, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-1956](https://cve.now/CVE-2013-1956.md): The create\_user\_ns function in kernel/user\_namespace.c in the Linux kernel before 3.8.6 does not check whether a chroot directory exists tha (no CVSS)
- [CVE-2013-1957](https://cve.now/CVE-2013-1957.md): The clone\_mnt function in fs/namespace.c in the Linux kernel before 3.8.6 does not properly restrict changes to the MNT\_READONLY flag, which (no CVSS)
- [CVE-2013-1958](https://cve.now/CVE-2013-1958.md): The scm\_check\_creds function in net/core/scm.c in the Linux kernel before 3.8.6 does not properly enforce capability requirements for contro (no CVSS)
- [CVE-2012-5218](https://cve.now/CVE-2012-5218.md): HP ElitePad 900 PCs with BIOS F.0x before F.01 Update 1.0.0.8 do not enable the Secure Boot feature, which allows local users to bypass inte (no CVSS)
- [CVE-2012-6140](https://cve.now/CVE-2012-6140.md): pam\_google\_authenticator.c in the PAM module in Google Authenticator before 1.0 requires user-readable permissions for the secret file, whic (no CVSS)
- [CVE-2013-0540](https://cve.now/CVE-2013-0540.md): IBM WebSphere Application Server (WAS) Liberty Profile 8.5 before 8.5.0.2, when SSL is not enabled, does not properly validate authenticatio (no CVSS)
- [CVE-2013-0541](https://cve.now/CVE-2013-0541.md): Buffer overflow in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0 (no CVSS)
- [CVE-2013-0542](https://cve.now/CVE-2013-0542.md): Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 be (no CVSS)
- [CVE-2013-0543](https://cve.now/CVE-2013-0543.md): IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 on Linux, Solari (no CVSS)
- [CVE-2013-0544](https://cve.now/CVE-2013-0544.md): Directory traversal vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7. (no CVSS)
- [CVE-2013-0565](https://cve.now/CVE-2013-0565.md): Cross-site scripting (XSS) vulnerability in the RPC adapter for the Web 2.0 and Mobile toolkit in IBM WebSphere Application Server (WAS) 8.5 (no CVSS)
- [CVE-2013-1088](https://cve.now/CVE-2013-1088.md): Cross-site request forgery (CSRF) vulnerability in Novell iManager 2.7 before SP6 Patch 1 allows remote attackers to hijack the authenticati (no CVSS)
- [CVE-2013-1195](https://cve.now/CVE-2013-1195.md): The time-based ACL implementation on Cisco Adaptive Security Appliances (ASA) devices, and in Cisco Firewall Services Module (FWSM), does no (no CVSS)
- [CVE-2013-1214](https://cve.now/CVE-2013-1214.md): The scripts editor in Cisco Unified Contact Center Express (aka Unified CCX) does not properly manage privileges for anonymous logins, which (no CVSS)
- [CVE-2013-1217](https://cve.now/CVE-2013-1217.md): The generic input/output control implementation in Cisco IOS does not properly manage buffers, which allows remote authenticated users to ca (no CVSS)
- [CVE-2013-3268](https://cve.now/CVE-2013-3268.md): Novell iManager 2.7 before SP6 Patch 1 does not refresh a token after a logout action, which has unspecified impact and remote attack vector (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-04-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.