# CVEs published 2013-10-27

5 CVEs were published on October 27, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-0337](https://cve.now/CVE-2013-0337.md): The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the (1) access.log and (2) error.log fi (no CVSS)
- [CVE-2013-4122](https://cve.now/CVE-2013-4122.md): Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by the crypt function as impleme (no CVSS)
- [CVE-2013-4301](https://cve.now/CVE-2013-4301.md): includes/resourceloader/ResourceLoaderContext.php in MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 allows r (no CVSS)
- [CVE-2013-4302](https://cve.now/CVE-2013-4302.md): (1) ApiBlock.php, (2) ApiCreateAccount.php, (3) ApiLogin.php, (4) ApiMain.php, (5) ApiQueryDeletedrevs.php, (6) ApiTokens.php, and (7) ApiUn (no CVSS)
- [CVE-2013-4428](https://cve.now/CVE-2013-4428.md): OpenStack Image Registry and Delivery Service (Glance) Folsom, Grizzly before 2013.1.4, and Havana before 2013.2, when the download\_image po (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-10-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.