Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: March 2013

46 records · 2 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2013-1775
    40Plan

    sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time rest

    MediumCVSS 6.9WeaponizedEPSS 3%

    todd miller · sudoMar 5, 2013

  • CVE-2013-0809
    43Plan

    Unspecified vulnerability in the 2D component in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 15 and earlier, 6 U

    CriticalCVSS 10.0No exploitEPSS 10%

    oracle · jreMar 5, 2013

  • CVE-2013-1493
    66This week

    The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Upd

    CriticalCVSS 10.0WeaponizedEPSS 86%

    oracle · jreMar 5, 2013

  • CVE-2013-1643
    23Monitor

    The SOAP parser in PHP before 5.3.23 and 5.4.x before 5.4.13 allows remote attackers to read arbitrary files via a SOAP WSDL file containing

    MediumCVSS 5.0No exploitEPSS 10%

    php · phpMar 6, 2013

  • CVE-2010-5107
    35Monitor

    The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, w

    HighCVSS 7.5No exploitEPSS 16%

    openbsd · opensshMar 7, 2013

  • CVE-2013-0401
    43Plan

    The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earli

    CriticalCVSS 10.0No exploitEPSS 10%

    oracle · jdkMar 8, 2013

  • CVE-2013-1488
    66This week

    The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to exec

    CriticalCVSS 10.0WeaponizedEPSS 87%

    oracle · jdkMar 8, 2013

  • CVE-2013-1491
    45Plan

    The Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier,

    CriticalCVSS 10.0Proof of conceptEPSS 16%

    oracle · jdkMar 8, 2013

  • CVE-2011-4969
    23Monitor

    Cross-site scripting (XSS) vulnerability in jQuery before 1.6.3, when using location.hash to select elements, allows remote attackers to inj

    MediumCVSS 4.3No exploitEPSS 19%

    jquery · jqueryMar 8, 2013

  • CVE-2013-0249
    36Monitor

    Stack-based buffer overflow in the Curl_sasl_create_digest_md5_message function in lib/curl_sasl.c in curl and libcurl 7.26.0 through 7.28.1

    HighCVSS 7.5Proof of conceptEPSS 21%

    haxx · curlMar 8, 2013

  • CVE-2012-5201
    59Plan

    Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) be

    CriticalCVSS 10.0WeaponizedEPSS 63%

    hp · intelligent management centerMar 9, 2013

  • CVE-2012-5202
    40Plan

    Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) be

    HighCVSS 7.5WeaponizedEPSS 21%

    hp · intelligent management centerMar 9, 2013

  • CVE-2012-5203
    40Plan

    Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) be

    HighCVSS 7.5WeaponizedEPSS 21%

    hp · intelligent management center for automated network managerMar 9, 2013

  • CVE-2012-5204
    40Plan

    Unspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) be

    HighCVSS 7.5WeaponizedEPSS 18%

    hp · intelligent management centerMar 9, 2013

  • CVE-2013-2551
    87Now

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web

    HighCVSS 8.8KEVWeaponizedEPSS 73%

    microsoft · internet explorerMar 11, 2013

  • CVE-2013-2552
    34Monitor

    Unspecified vulnerability in Microsoft Internet Explorer 10 on Windows 8 allows remote attackers to bypass the sandbox protection mechanism

    HighCVSS 7.5No exploitEPSS 14%

    microsoft · internet explorerMar 11, 2013

  • CVE-2013-2557
    33Monitor

    The sandbox protection mechanism in Microsoft Internet Explorer 9 allows remote attackers to cause a denial of service (memory corruption) o

    HighCVSS 7.5No exploitEPSS 10%

    microsoft · internet explorerMar 11, 2013

  • CVE-2013-1081
    50Plan

    Directory traversal vulnerability in MDM.php in Novell ZENworks Mobile Management (ZMM) 2.6.1 and 2.7.0 allows remote attackers to include a

    HighCVSS 7.5WeaponizedEPSS 68%

    novell · zenworks mobile managementMar 11, 2013

  • CVE-2013-0074
    85Now

    Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which

    HighCVSS 7.8KEVWeaponizedEPSS 78%

    microsoft · silverlightMar 12, 2013

  • CVE-2013-0079
    45Plan

    Microsoft Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file that triggers incorrect memory al

    CriticalCVSS 9.3No exploitEPSS 26%

    microsoft · office filter packMar 12, 2013

  • CVE-2013-0080
    36Monitor

    Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allow remote attackers to bypass intended read restrictions for cont

    HighCVSS 7.5No exploitEPSS 19%

    microsoft · sharepoint foundationMar 12, 2013

  • CVE-2013-0083
    21Monitor

    Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 allows remote attackers to inject arbitrary web script or H

    MediumCVSS 4.3No exploitEPSS 14%

    microsoft · sharepoint foundationMar 12, 2013

  • CVE-2013-0084
    36Monitor

    Directory traversal vulnerability in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to bypa

    HighCVSS 7.5No exploitEPSS 21%

    microsoft · sharepoint foundationMar 12, 2013

  • CVE-2013-0085
    41Plan

    Buffer overflow in Microsoft SharePoint Server 2010 SP1 and SharePoint Foundation 2010 SP1 allows remote attackers to cause a denial of serv

    HighCVSS 7.8No exploitEPSS 33%

    microsoft · sharepoint foundationMar 12, 2013

  • CVE-2013-0086
    27Monitor

    Microsoft OneNote 2010 SP1 does not properly determine buffer sizes during memory allocation, which allows remote attackers to obtain sensit

    MediumCVSS 5.0No exploitEPSS 23%

    microsoft · sharepoint foundationMar 12, 2013

  • CVE-2013-0087
    43Plan

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web

    CriticalCVSS 9.3No exploitEPSS 18%

    microsoft · internet explorerMar 12, 2013

  • CVE-2013-0088
    43Plan

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web

    CriticalCVSS 9.3No exploitEPSS 19%

    microsoft · internet explorerMar 12, 2013

  • CVE-2013-0089
    43Plan

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web

    CriticalCVSS 9.3No exploitEPSS 18%

    microsoft · internet explorerMar 12, 2013

  • CVE-2013-0090
    46Plan

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web

    HighCVSS 8.8Proof of conceptEPSS 38%

    microsoft · internet explorerMar 12, 2013

  • CVE-2013-0091
    43Plan

    Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that

    CriticalCVSS 9.3No exploitEPSS 19%

    microsoft · internet explorerMar 12, 2013

  • CVE-2013-0092
    45Plan

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web

    CriticalCVSS 9.3No exploitEPSS 28%

    microsoft · internet explorerMar 12, 2013

  • CVE-2013-0093
    43Plan

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web

    CriticalCVSS 9.3No exploitEPSS 18%

    microsoft · internet explorerMar 12, 2013

  • CVE-2013-0094
    43Plan

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web

    CriticalCVSS 9.3No exploitEPSS 18%

    microsoft · internet explorerMar 12, 2013

  • CVE-2013-0095
    26Monitor

    Outlook in Microsoft Office for Mac 2008 before 12.3.6 and Office for Mac 2011 before 14.3.2 allows remote attackers to trigger access to a

    MediumCVSS 5.0No exploitEPSS 20%

    microsoft · officeMar 12, 2013

  • CVE-2013-1288
    43Plan

    Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that

    CriticalCVSS 9.3No exploitEPSS 18%

    microsoft · internet explorerMar 12, 2013

  • CVE-2013-2558
    44Plan

    Unspecified vulnerability in Microsoft Windows 8 allows remote attackers to cause a denial of service (reboot) or possibly have unknown othe

    CriticalCVSS 10.0No exploitEPSS 14%

    microsoft · windows 8Mar 12, 2013

  • CVE-2013-1469
    33Monitor

    Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a ..

    MediumCVSS 4.0Proof of conceptEPSS 56%

    piwigo · piwigoMar 13, 2013

  • CVE-2013-1814
    40Plan

    The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain sensitive information

    MediumCVSS 4.0WeaponizedEPSS 73%

    apache · raveMar 13, 2013

  • CVE-2013-2566
    60This week

    The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to

    MediumCVSS 5.9WeaponizedEPSS 84%

    oracle · communications application session controllerMar 15, 2013

  • CVE-2013-2492
    40Plan

    Stack-based buffer overflow in Firebird 2.1.3 through 2.1.5 before 18514, and 2.5.1 through 2.5.3 before 26623, on Windows allows remote att

    MediumCVSS 6.8WeaponizedEPSS 42%

    firebirdsql · firebirdMar 15, 2013

  • CVE-2013-0232
    44Plan

    includes/functions.php in ZoneMinder Video Server 1.24.0, 1.25.0, and earlier allows remote attackers to execute arbitrary commands via shel

    HighCVSS 7.5WeaponizedEPSS 47%

    zoneminder · zoneminderMar 20, 2013

  • CVE-2013-0332
    23Monitor

    Multiple directory traversal vulnerabilities in ZoneMinder 1.24.x before 1.24.4 allow remote attackers to read arbitrary files via a ..

    MediumCVSS 5.0Proof of conceptEPSS 10%

    zoneminder · zoneminderMar 20, 2013

  • CVE-2013-2266
    44Plan

    libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms

    HighCVSS 7.8No exploitEPSS 42%

    isc · bindMar 28, 2013

  • CVE-2013-1861
    26Monitor

    MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31

    MediumCVSS 5.0Proof of conceptEPSS 18%

    mariadb · mariadbMar 28, 2013

  • CVE-2013-1080
    63This week

    The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform authentication for ze

    CriticalCVSS 10.0WeaponizedEPSS 77%

    novell · zenworks configuration managementMar 29, 2013

  • CVE-2013-1082
    34Monitor

    Directory traversal vulnerability in DUSAP.php in Novell ZENworks Mobile Management before 2.7.1 allows remote attackers to include and exec

    HighCVSS 7.5No exploitEPSS 12%

    novell · zenworks mobile managementMar 29, 2013