# CVEs published 2013-04-29

15 CVEs were published on April 29, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-1914](https://cve.now/CVE-2013-1914.md): Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.17 and earlie (no CVSS)
- [CVE-2013-1926](https://cve.now/CVE-2013-1926.md): The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses the same class loader for applets with the same codebase path but from diffe (no CVSS)
- [CVE-2013-1927](https://cve.now/CVE-2013-1927.md): The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute arbitrary code via a crafted file that validat (no CVSS)
- [CVE-2013-1944](https://cve.now/CVE-2013-1944.md): The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which all (no CVSS)
- [CVE-2012-5221](https://cve.now/CVE-2012-5221.md): Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90xx, M30xx, M4345, M50xx, M90xx, P3 (no CVSS)
- [CVE-2013-1196](https://cve.now/CVE-2013-1196.md): The command-line interface in Cisco Secure Access Control System (ACS), Identity Services Engine Software, Context Directory Agent, Applicat (no CVSS)
- [CVE-2013-1928](https://cve.now/CVE-2013-1928.md): The do\_video\_set\_spu\_palette function in fs/compat\_ioctl.c in the Linux kernel before 3.6.5 on unspecified architectures lacks a certain err (no CVSS)
- [CVE-2013-2015](https://cve.now/CVE-2013-2015.md): The ext4\_orphan\_del function in fs/ext4/namei.c in the Linux kernel before 3.7.3 does not properly handle orphan-list entries for non-journa (no CVSS)
- [CVE-2013-3301](https://cve.now/CVE-2013-3301.md): The ftrace implementation in the Linux kernel before 3.8.8 allows local users to cause a denial of service (NULL pointer dereference and sys (no CVSS)
- [CVE-2013-3302](https://cve.now/CVE-2013-3302.md): Race condition in the smb\_send\_rqst function in fs/cifs/transport.c in the Linux kernel before 3.7.2 allows local users to cause a denial of (no CVSS)
- [CVE-2013-1198](https://cve.now/CVE-2013-1198.md): Cross-site scripting (XSS) vulnerability in a Flash component in Cisco Unified Computing System (UCS) Central allows remote attackers to inj (no CVSS)
- [CVE-2013-1216](https://cve.now/CVE-2013-1216.md): Memory leak in the SNMP module in Cisco IOS XR allows remote authenticated users to cause a denial of service (memory consumption and proces (no CVSS)
- [CVE-2013-1219](https://cve.now/CVE-2013-1219.md): SensorApp in Cisco Intrusion Prevention System (IPS) allows local users to cause a denial of service (Regex hardware job failure and applica (no CVSS)
- [CVE-2013-1226](https://cve.now/CVE-2013-1226.md): The Ethernet frame-forwarding implementation in Cisco NX-OS on Nexus 7000 devices allows remote attackers to cause a denial of service (forw (no CVSS)
- [CVE-2013-1227](https://cve.now/CVE-2013-1227.md): Cross-site scripting (XSS) vulnerability in the web framework in Cisco Unified Communications Domain Manager allows remote attackers to inje (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-04-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.