# CVEs published 2013-04-26

10 CVEs were published on April 26, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-1428](https://cve.now/CVE-2013-1428.md): Stack-based buffer overflow in the receive\_tcppacket function in net\_packet.c in tinc before 1.0.21 and 1.1 before 1.1pre7 allows remote aut (no CVSS)
- [CVE-2012-5220](https://cve.now/CVE-2012-5220.md): Unspecified vulnerability in HP Storage Data Protector 6.20, 6.21, 7.00, and 7.01 allows local users to gain privileges via unknown vectors. (no CVSS)
- [CVE-2013-0727](https://cve.now/CVE-2013-0727.md): Multiple untrusted search path vulnerabilities in Global Mapper 14.1.0 allow local users to gain privileges via a Trojan horse (1) dwmapi.dl (no CVSS)
- [CVE-2013-2306](https://cve.now/CVE-2013-2306.md): The jigbrowser+ application before 1.6.4 for Android does not properly open windows, which allows remote attackers to spoof the address bar (no CVSS)
- [CVE-2013-2307](https://cve.now/CVE-2013-2307.md): The Yahoo! Browser application before 1.4.3 for Android allows remote attackers to spoof the address bar via a crafted web site. (no CVSS)
- [CVE-2013-2709](https://cve.now/CVE-2013-2709.md): Cross-site request forgery (CSRF) vulnerability in the FourSquare Checkins plugin before 1.3 for WordPress allows remote attackers to hijack (no CVSS)
- [CVE-2013-3238](https://cve.now/CVE-2013-3238.md): phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via a /e\\x00 sequence, wh (no CVSS)
- [CVE-2013-3239](https://cve.now/CVE-2013-3239.md): phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authenticated users to execute (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2013-3240](https://cve.now/CVE-2013-3240.md): Directory traversal vulnerability in the Export feature in phpMyAdmin 4.x before 4.0.0-rc3 allows remote authenticated users to read arbitra (no CVSS)
- [CVE-2013-3241](https://cve.now/CVE-2013-3241.md): export.php (aka the export script) in phpMyAdmin 4.x before 4.0.0-rc3 overwrites global variables on the basis of the contents of the POST s (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-04-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.