CVEs published in January 2013
431 vulnerabilities, 104 critical, 6 exploited.
- e107Multiple cross-site request forgery (CSRF) vulnerabilities in e107_admin/download.php in e107 1.0...6.8 Medium
- e107Cross-site request forgery (CSRF) vulnerability in e107_admin/newspost.php in e107 1.0.1 allows...6.8 Medium
- gnu grepMultiple integer overflows in GNU Grep before 2.11 might allow context-dependent attackers to...4.4 Medium
- owncloud serverCross-site scripting (XSS) vulnerability in bookmarks/js/bookmarks.js in ownCloud 4.0.x before 4...4.3 Medium
- owncloud serverownCloud 4.0.x before 4.0.10 and 4.5.x before 4.5.5 does not properly restrict access to settings...4.3 Medium
- steven jones contextThe Context module 6.x-3.x before 6.x-3.1 and 7.x-3.x before 7.x-3.0-beta6 for Drupal does not...5.0 Medium
- nodewords project nodewordsThe Nodewords: D6 Meta Tags module before 6.x-1.14 for Drupal, when configured to automatically...4.3 Medium
- drupal, debian linux +1 moreThe file upload feature in Drupal 6.x before 6.27 and 7.x before 7.18 allows remote authenticated...6.0 Medium
- drupalDrupal 6.x before 6.27 allows remote attackers to obtain sensitive information about uploaded...5.0 Medium
- drupalDrupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users, which might...5.0 Medium
- apache cxfXML Signature/Encryption Not Validated in Apache CXF10.0 High
- wp php widget project php widgetwp-php-widget.php in the WP PHP widget plugin 1.0.2 for WordPress allows remote attackers to...5.0 Medium
- opera browserOpera before 12.12 on UNIX uses weak permissions for the profile directory, which allows local...4.6 Medium
- opera browserOpera before 12.12 allows remote attackers to spoof the address field via a high rate of HTTP...5.0 Medium
- opera browserOpera before 12.12 does not properly allocate memory for GIF images, which allows remote...9.3 High
- opera browserOpera before 12.11 allows remote attackers to determine the existence of arbitrary local files...5.0 Medium
- opera browserHeap-based buffer overflow in Opera before 12.11 allows remote attackers to execute arbitrary...9.3 High
- opera browserOpera before 12.10 follows Internet shortcuts that are referenced by a (1) IMG element or (2)...4.3 Medium
- opera browserOpera before 12.10 does not properly handle incorrect size data in a WebP image, which allows...5.0 Medium
- opera browserOpera before 12.10 allows remote attackers to execute arbitrary code or cause a denial of service...9.3 High
- opera browserCross-site scripting (XSS) vulnerability in Opera before 12.10 allows remote attackers to inject...4.3 Medium
- opera browserCross-site scripting (XSS) vulnerability in Opera before 12.10 allows remote attackers to inject...4.3 Medium
- opera browserOpera before 12.10 does not properly implement the Cross-Origin Resource Sharing (CORS)...5.0 Medium
- opera browserThe X.509 certificate-validation functionality in the https implementation in Opera before 12.10...5.0 Medium
- opera browserOpera before 11.67 and 12.x before 12.02 allows remote attackers to cause truncation of a dialog,...5.0 Medium
- intel connmanConnMan 1.3 on Tizen continues to list the bluetooth service after offline mode has been enabled,...4.3 Medium
- lemonldap-ng lemonldap\LemonLDAP::NG before 1.2.3 does not use the signature-verification capability of the Lasso...7.5 High
- ircd-ratboxmodules/m_capab.c in (1) ircd-ratbox before 3.0.8 and (2) Charybdis before 3.4.2 does not...5.0 Medium
- ibm spss modelerIBM SPSS Modeler 14.0, 14.1, 14.2 through FP3, and 15.0 before FP2 allows remote attackers to...5.8 Medium
- torproject torThe connection_edge_process_relay_cell function in or/relay.c in Tor before 0.2.3.25 maintains...5.0 Medium
- polycom hdx system softwareCross-site scripting (XSS) vulnerability in the web management interface on Polycom HDX Video End...4.3 Medium