# CVEs published 2013-06-07

14 CVEs were published on June 7, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-0142](https://cve.now/CVE-2013-0142.md): QNAP VioStor NVR devices with firmware 4.0.3, and the Surveillance Station Pro component in QNAP NAS, have a hardcoded guest account, which (no CVSS)
- [CVE-2013-0143](https://cve.now/CVE-2013-0143.md): cgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmware 4.0.3, and in the Surveillance Station Pro component in QNAP NAS, allows remo (no CVSS)
- [CVE-2013-0144](https://cve.now/CVE-2013-0144.md): Cross-site request forgery (CSRF) vulnerability in cgi-bin/create\_user.cgi on QNAP VioStor NVR devices with firmware 4.0.3 allows remote att (no CVSS)
- [CVE-2013-0947](https://cve.now/CVE-2013-0947.md): EMC RSA Authentication Manager 8.0 before P1 allows local users to discover cleartext operating-system passwords, HTTP plug-in proxy passwor (no CVSS)
- [CVE-2011-4604](https://cve.now/CVE-2011-4604.md): The bat\_socket\_read function in net/batman-adv/icmp\_socket.c in the Linux kernel before 3.3 allows remote attackers to cause a denial of ser (no CVSS)
- [CVE-2013-1929](https://cve.now/CVE-2013-1929.md): Heap-based buffer overflow in the tg3\_read\_vpd function in drivers/net/ethernet/broadcom/tg3.c in the Linux kernel before 3.8.6 allows physi (no CVSS)
- [CVE-2013-2128](https://cve.now/CVE-2013-2128.md): The tcp\_read\_sock function in net/ipv4/tcp.c in the Linux kernel before 2.6.34 does not properly manage skb consumption, which allows local (no CVSS)
- [CVE-2013-2141](https://cve.now/CVE-2013-2141.md): The do\_tkill function in kernel/signal.c in the Linux kernel before 3.8.9 does not initialize a certain data structure, which allows local u (no CVSS)
- [CVE-2013-2146](https://cve.now/CVE-2013-2146.md): arch/x86/kernel/cpu/perf\_event\_intel.c in the Linux kernel before 3.8.9, when the Performance Events Subsystem is enabled, specifies an inco (no CVSS)
- [CVE-2013-2147](https://cve.now/CVE-2013-2147.md): The HP Smart Array controller disk-array driver and Compaq SMART2 controller disk-array driver in the Linux kernel through 3.9.4 do not init (no CVSS)
- [CVE-2013-2148](https://cve.now/CVE-2013-2148.md): The fill\_event\_metadata function in fs/notify/fanotify/fanotify\_user.c in the Linux kernel through 3.9.4 does not initialize a certain struc (no CVSS)
- [CVE-2013-2850](https://cve.now/CVE-2013-2850.md): Heap-based buffer overflow in the iscsi\_add\_notunderstood\_response function in drivers/target/iscsi/iscsi\_target\_parameters.c in the iSCSI t (no CVSS)
- [CVE-2013-2851](https://cve.now/CVE-2013-2851.md): Format string vulnerability in the register\_disk function in block/genhd.c in the Linux kernel through 3.9.4 allows local users to gain priv (no CVSS)
- [CVE-2013-2852](https://cve.now/CVE-2013-2852.md): Format string vulnerability in the b43\_request\_firmware function in drivers/net/wireless/b43/main.c in the Broadcom B43 wireless driver in t (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-06-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.