# CVEs published 2013-05-03

14 CVEs were published on May 3, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-0940](https://cve.now/CVE-2013-0940.md): The nsrpush process in the client in EMC NetWorker before 7.6.5.3 and 8.x before 8.0.1.4 sets weak permissions for unspecified files, which (no CVSS)
- [CVE-2013-0944](https://cve.now/CVE-2013-0944.md): The web-based file-restore interface in EMC Avamar Server before 6.1.0 allows remote authenticated users to read arbitrary files via a craft (no CVSS)
- [CVE-2013-0945](https://cve.now/CVE-2013-0945.md): EMC Avamar Client before 6.1.101-89 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subj (no CVSS)
- [CVE-2013-1231](https://cve.now/CVE-2013-1231.md): The HTTP implementation in Cisco WebEx Node for MCS and WebEx Meetings Server allows remote attackers to read cache files via a crafted requ (no CVSS)
- [CVE-2013-1234](https://cve.now/CVE-2013-1234.md): The SNMP module in Cisco IOS XR allows remote authenticated users to cause a denial of service (process restart) via crafted SNMP packets, a (no CVSS)
- [CVE-2013-1959](https://cve.now/CVE-2013-1959.md): kernel/user\_namespace.c in the Linux kernel before 3.8.9 does not have appropriate capability requirements for the uid\_map and gid\_map files (no CVSS)
- [CVE-2013-1979](https://cve.now/CVE-2013-1979.md): The scm\_set\_cred function in include/net/scm.h in the Linux kernel before 3.8.11 uses incorrect uid and gid values during credentials passin (no CVSS)
- [CVE-2013-2017](https://cve.now/CVE-2013-2017.md): The veth (aka virtual Ethernet) driver in the Linux kernel before 2.6.34 does not properly manage skbs during congestion, which allows remot (no CVSS)
- [CVE-2013-3056](https://cve.now/CVE-2013-3056.md): Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass intended privilege requirements and delete th (no CVSS)
- [CVE-2013-3057](https://cve.now/CVE-2013-3057.md): Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass intended privilege requirements and list the (no CVSS)
- [CVE-2013-3058](https://cve.now/CVE-2013-3058.md): Cross-site scripting (XSS) vulnerability in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2013-3059](https://cve.now/CVE-2013-3059.md): Cross-site scripting (XSS) vulnerability in the Voting plugin in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote attackers (no CVSS)
- [CVE-2013-3242](https://cve.now/CVE-2013-3242.md): plugins/system/remember/remember.php in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 does not properly handle an object obtained by un (no CVSS)
- [CVE-2013-3267](https://cve.now/CVE-2013-3267.md): Cross-site scripting (XSS) vulnerability in the highlighter plugin in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote attac (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-05-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.