Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
January

CVEs published in January 2013

431 vulnerabilities, 104 critical, 6 exploited.

Known exploitedIn KEVPublic exploitFix available

oracle jd edwards productsUnspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards...CVE-2012-16783.5 LowJanuary 17, 2013
oracle fusion middlewareUnspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle...CVE-2012-16774.3 MediumJanuary 17, 2013
oracle mysql, canonical ubuntu linux, mariadb +2 moreUnspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows...CVE-2012-05784.0 MediumJanuary 17, 2013
oracle mysql, canonical ubuntu linux, mariadb +4 more +6 moreUnspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28...CVE-2012-05744.0 MediumJanuary 17, 2013
oracle mysql, canonical ubuntu linux, mariadb +4 more +6 moreUnspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28...CVE-2012-05724.0 MediumJanuary 17, 2013
sun sunos, xerox freeflow print server +1 moreUnspecified vulnerability Oracle Sun Solaris 10 allows local users to affect confidentiality and...CVE-2012-05693.3 LowJanuary 17, 2013
adobe coldfusionadministrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass...CVE-2013-0632In KEVPublic exploitEPSS 93.1%9.8 CriticalJanuary 17, 2013
linux kernelThe xen_failsafe_callback function in Xen for the Linux kernel 2.6.23 and other versions, when...CVE-2013-0190Fix available4.9 MediumJanuary 16, 2013
google chromeGoogle Chrome before 24.0.1312.52 on Linux uses weak permissions for shared memory segments,...CVE-2013-08387.5 HighJanuary 15, 2013
google chrome, opensuse +1 moreGoogle Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or...CVE-2013-08377.5 HighJanuary 15, 2013
google chrome, v8, opensuse +2 moreGoogle V8 before 3.14.5.3, as used in Google Chrome before 24.0.1312.52, does not properly...CVE-2013-08366.8 MediumJanuary 15, 2013
google chrome, opensuse +1 moreUnspecified vulnerability in the Geolocation implementation in Google Chrome before 24.0.1312.52...CVE-2013-08355.0 MediumJanuary 15, 2013
google chrome, opensuse +1 moreGoogle Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (out-of...CVE-2013-08345.0 MediumJanuary 15, 2013
google chrome, opensuse +1 moreGoogle Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (out-of...CVE-2013-08335.0 MediumJanuary 15, 2013
google chrome, opensuse +1 moreUse-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to...CVE-2013-08327.5 HighJanuary 15, 2013
google chrome, opensuse +1 moreDirectory traversal vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to...CVE-2013-08317.5 HighJanuary 15, 2013
google chrome, opensuse +1 moreThe IPC layer in Google Chrome before 24.0.1312.52 on Windows omits a NUL character required for...CVE-2013-08307.5 HighJanuary 15, 2013
google chromeGoogle Chrome before 24.0.1312.52 does not properly maintain database metadata, which allows...CVE-2013-08296.4 MediumJanuary 15, 2013
google chromeThe PDF functionality in Google Chrome before 24.0.1312.52 does not properly perform a cast of an...CVE-2013-08286.8 MediumJanuary 15, 2013
google chromeGoogle Chrome before 24.0.1312.52 does not properly handle image data in PDF documents, which...CVE-2012-51574.3 MediumJanuary 15, 2013
google chromeUse-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to...CVE-2012-51566.8 MediumJanuary 15, 2013
google chromeGoogle Chrome before 24.0.1312.52 on Mac OS X does not use an appropriate sandboxing approach for...CVE-2012-51555.0 MediumJanuary 15, 2013
google chrome, opensuse +1 moreInteger overflow in Google Chrome before 24.0.1312.52 on Windows allows attackers to cause a...CVE-2012-51547.5 HighJanuary 15, 2013
google chrome, opensuse +1 moreGoogle V8 before 3.14.5.3, as used in Google Chrome before 24.0.1312.52, allows remote attackers...CVE-2012-51537.5 HighJanuary 15, 2013
google chrome, opensuse +1 moreGoogle Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (out-of...CVE-2012-51525.0 MediumJanuary 15, 2013
google chromeInteger overflow in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial...CVE-2012-51516.8 MediumJanuary 15, 2013
google chrome, opensuse +1 moreUse-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to...CVE-2012-5150Fix available7.5 HighJanuary 15, 2013
google chrome, opensuse +1 moreInteger overflow in the audio IPC layer in Google Chrome before 24.0.1312.52 allows remote...CVE-2012-51497.5 HighJanuary 15, 2013
google chrome, opensuse +1 moreThe hyphenation functionality in Google Chrome before 24.0.1312.52 does not properly validate...CVE-2012-51487.5 HighJanuary 15, 2013
google chrome, opensuse +1 moreUse-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to...CVE-2012-51477.5 HighJanuary 15, 2013
google chrome, opensuse +1 moreGoogle Chrome before 24.0.1312.52 allows remote attackers to bypass the Same Origin Policy via a...CVE-2012-51465.0 MediumJanuary 15, 2013
google chrome, opensuse +1 moreUse-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to...CVE-2012-51457.5 HighJanuary 15, 2013
qemu, canonical ubuntu linux, debian linux +9 more +11 moreBuffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3...CVE-2012-6075Fix available9.3 HighJanuary 15, 2013
oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java 7 before Update 11 allows remote attackers to affect...CVE-2012-317410.0 HighJanuary 14, 2013
rubyonrails rails, ruby on rails, debian linux +2 moreActive Record allows bypassing of database-query restrictionsCVE-2013-0155Fix available6.4 MediumJanuary 13, 2013
mozilla firefox, seamonkey, thunderbird +6 more +8 moreHeap-based buffer overflow in the gfxTextRun::ShrinkToLigatureBoundaries function in Mozilla...CVE-2013-07719.3 HighJanuary 13, 2013
mozilla firefox, seamonkey, thunderbird +6 more +8 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0,...CVE-2013-07709.3 HighJanuary 13, 2013
mozilla firefox, seamonkey, thunderbird +11 more +13 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0,...CVE-2013-07699.3 HighJanuary 13, 2013
mozilla firefox, seamonkey, thunderbird +10 more +12 moreStack-based buffer overflow in the Canvas implementation in Mozilla Firefox before 18.0, Firefox...CVE-2013-07689.3 HighJanuary 13, 2013
mozilla firefox, seamonkey, thunderbird +11 more +13 moreThe nsSVGPathElement::GetPathLengthScale function in Mozilla Firefox before 18.0, Firefox ESR 10...CVE-2013-076710.0 HighJanuary 13, 2013
mozilla firefox, seamonkey, thunderbird +11 more +13 moreUse-after-free vulnerability in the ~nsHTMLEditRules implementation in Mozilla Firefox before 18...CVE-2013-07669.3 HighJanuary 13, 2013
mozilla firefox, seamonkey, thunderbird +6 more +8 moreThe nsSOCKSSocketInfo::ConnectToProxy function in Mozilla Firefox before 18.0, Firefox ESR 17.x...CVE-2013-07649.3 HighJanuary 13, 2013
mozilla firefox, seamonkey, thunderbird +11 more +13 moreUse-after-free vulnerability in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1,...CVE-2013-07639.3 HighJanuary 13, 2013
mozilla firefox, seamonkey, thunderbird +11 more +13 moreUse-after-free vulnerability in the imgRequest::OnStopFrame function in Mozilla Firefox before 18...CVE-2013-07629.3 HighJanuary 13, 2013
mozilla firefox, seamonkey, thunderbird +6 more +8 moreUse-after-free vulnerability in the mozilla::TrackUnionStream::EndTrack implementation in Mozilla...CVE-2013-07619.3 HighJanuary 13, 2013
mozilla firefox, seamonkey, thunderbird +6 more +8 moreBuffer overflow in the CharDistributionAnalysis::HandleOneChar function in Mozilla Firefox before...CVE-2013-07609.3 HighJanuary 13, 2013
mozilla firefox, seamonkey, thunderbird +11 more +13 moreMozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird...CVE-2013-07595.0 MediumJanuary 13, 2013
mozilla firefox, seamonkey, thunderbird +11 more +13 moreMozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird...CVE-2013-0758Public exploitEPSS 73.4%9.3 HighJanuary 13, 2013
mozilla firefox, seamonkey, thunderbird +6 more +8 moreThe Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x...CVE-2013-0757Public exploitEPSS 60.9%9.3 HighJanuary 13, 2013
mozilla firefox, seamonkey, thunderbird +6 more +8 moreUse-after-free vulnerability in the obj_toSource function in Mozilla Firefox before 18.0, Firefox...CVE-2013-07569.3 HighJanuary 13, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open