Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
January

CVEs published in January 2013

431 vulnerabilities, 104 critical, 6 exploited.

Known exploitedIn KEVPublic exploitFix available

rockwell automation 1788-enbt flexlogix adapter, 1794-aentr flex i/o ethernet/ip adapter, compactlogix l32e and l35e controllers +21 more +23 moreRockwell Automation ControlLogix PLC Information ExposureCVE-2012-6441EPSS 57.1%5.0 January 24, 2013
rockwell automation 1788-enbt flexlogix adapter, 1794-aentr flex i/o ethernet/ip adapter, compactlogix l32e and l35e controllers +21 more +23 moreRockwell Automation ControlLogix PLC Improper Input ValidationCVE-2012-64409.3 January 24, 2013
rockwell automation 1788-enbt flexlogix adapter, 1794-aentr flex i/o ethernet/ip adapter, compactlogix l32e and l35e controllers +21 more +23 moreRockwell Automation ControlLogix PLC Improper Access ControlCVE-2012-6439EPSS 23.2%8.5 January 24, 2013
rockwell automation 1788-enbt flexlogix adapter, 1794-aentr flex i/o ethernet/ip adapter, compactlogix l32e and l35e controllers +21 more +23 moreRockwell Automation ControlLogix PLC Improper Input ValidationCVE-2012-6438EPSS 35.5%7.8 January 24, 2013
rockwell automation 1788-enbt flexlogix adapter, 1794-aentr flex i/o ethernet/ip adapter, compactlogix l32e and l35e controllers +21 more +23 moreRockwell Automation ControlLogix PLC Improper AuthenticationCVE-2012-6437EPSS 10.5%10.0 January 24, 2013
rockwell automation 1788-enbt flexlogix adapter, 1794-aentr flex i/o ethernet/ip adapter, compactlogix l32e and l35e controllers +21 more +23 moreRockwell Automation ControlLogix PLC Improper Input ValidationCVE-2012-6436EPSS 35.2%7.8 January 24, 2013
rockwell automation 1788-enbt flexlogix adapter, 1794-aentr flex i/o ethernet/ip adapter, compactlogix l32e and l35e controllers +21 more +23 moreRockwell Automation ControlLogix PLC Improper Access ControlCVE-2012-6435EPSS 42.8%7.8 January 24, 2013
freetypeThe _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to...CVE-2012-5670Fix available4.3 MediumJanuary 24, 2013
freetypeThe _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to...CVE-2012-5669Fix available4.3 MediumJanuary 24, 2013
freetypeFreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (NULL...CVE-2012-5668Fix available4.3 MediumJanuary 24, 2013
elefantcmsCross-site scripting (XSS) vulnerability in apps/admin/handlers/versions.php in Elefant CMS 1.2.0...CVE-2012-65214.3 MediumJanuary 24, 2013
wikidforumMultiple SQL injection vulnerabilities in the advanced search in Wikidforum 2.10 allow remote...CVE-2012-6520Public exploit7.5 HighJanuary 24, 2013
diy-cmsSQL injection vulnerability in modules/poll/index.php in DIY-CMS 1.0 allows remote attackers to...CVE-2012-6519Public exploit7.5 HighJanuary 24, 2013
diy-cmsCross-site request forgery (CSRF) vulnerability in mod.php in DiY-CMS 1.0 allows remote attackers...CVE-2012-6518Public exploit6.8 MediumJanuary 24, 2013
diy-cmsMultiple cross-site scripting (XSS) vulnerabilities in DiY-CMS 1.0 allow remote attackers to...CVE-2012-6517Public exploit4.3 MediumJanuary 24, 2013
shawn bradley php ticket systemSQL injection vulnerability in PHP Ticket System Beta 1 allows remote attackers to execute...CVE-2012-6516Public exploit7.5 HighJanuary 24, 2013
efrontlearning efronteFront 3.6.10, 3.6.11 build 15059, and earlier allows remote attackers to obtain sensitive...CVE-2012-65155.0 MediumJanuary 24, 2013
netshinesoftware com netinvoiceCross-site scripting (XSS) vulnerability in the nBill (com_nbill) component 2.3.2 for Joomla!...CVE-2012-65144.3 MediumJanuary 24, 2013
gpeasy cmsCross-site scripting (XSS) vulnerability in index.php/Admin_Preferences in gpEasy CMS 2.3.3...CVE-2012-6513Public exploit4.3 MediumJanuary 24, 2013
organizer project organizerThe Organizer plugin 1.2.1 for WordPress allows remote attackers to obtain the installation path...CVE-2012-65125.0 MediumJanuary 24, 2013
organizer project organizerMultiple cross-site scripting (XSS) vulnerabilities in organizer/page/users.php in the Organizer...CVE-2012-65114.3 MediumJanuary 24, 2013
netartmedia car portalMultiple cross-site scripting (XSS) vulnerabilities in NetArt Media Car Portal 3.0 allow remote...CVE-2012-6510Public exploit4.3 MediumJanuary 24, 2013
netartmedia car portalUnrestricted file upload vulnerability in NetArt Media Car Portal 3.0 allows remote attackers to...CVE-2012-6509Public exploit7.5 HighJanuary 24, 2013
netartmedia car portalMultiple cross-site request forgery (CSRF) vulnerabilities in NetArt Media Car Portal 3.0 allow...CVE-2012-6508Public exploit6.8 MediumJanuary 24, 2013
jason sexauer churchcmsMultiple SQL injection vulnerabilities in admin.php in ChurchCMS 0.0.1 allow remote attackers to...CVE-2012-65077.5 HighJanuary 24, 2013
zingiri web shopMultiple cross-site scripting (XSS) vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for...CVE-2012-6506Public exploit4.3 MediumJanuary 24, 2013
shawn bradley php volunteer managementCross-site scripting (XSS) vulnerability in mods/hours/data/get_hours.php in PHP Volunteer...CVE-2012-6505Public exploit4.3 MediumJanuary 24, 2013
shawn bradley php volunteer managementSQL injection vulnerability in mods/hours/data/get_hours.php in PHP Volunteer Management 1.0.2...CVE-2012-6504Public exploit7.5 HighJanuary 24, 2013
ninjaforge com ninjaxplorerUnspecified vulnerability in the NinjaXplorer component before 1.0.7 for Joomla! has unknown...CVE-2012-650310.0 HighJanuary 24, 2013
wikidforumMultiple cross-site scripting (XSS) vulnerabilities in Wikidforum 2.10 allow remote attackers to...CVE-2012-2099Public exploit4.3 MediumJanuary 24, 2013
sitecom wlm-2501Multiple cross-site request forgery (CSRF) vulnerabilities in Sitecom WLM-2501 allow remote...CVE-2012-1922Public exploit6.8 MediumJanuary 24, 2013
simplerealtytheme advanced text widget pluginCross-site scripting (XSS) vulnerability in advancedtext.php in Advanced Text Widget plugin...CVE-2011-4618Public exploitEPSS 10.1%4.3 MediumJanuary 24, 2013
icinga, nagios +1 moreMultiple stack-based buffer overflows in the get_history function in history.cgi in Nagios Core...CVE-2012-6096Public exploitFix availableEPSS 66.5%7.5 HighJanuary 22, 2013
apache cloudstack, citrix cloudplatform +1 moreApache CloudStack 4.0.0-incubating and Citrix CloudPlatform (formerly Citrix CloudStack) before 3...CVE-2012-56161.5 LowJanuary 22, 2013
activision call of duty eliteCall of Duty Elite for iOS 2.0.1 does not properly validate the server SSL certificate, which...CVE-2012-49185.8 MediumJanuary 22, 2013
mariadb, oracle mysql +1 moreMultiple SQL injection vulnerabilities in the replication code in Oracle MySQL possibly before 5...CVE-2012-44146.5 MediumJanuary 22, 2013
linux kernelBuffer overflow in the macvtap device driver in the Linux kernel before 3.4.5, when running in...CVE-2012-2119Fix available5.2 MediumJanuary 22, 2013
microsoft internet explorerMicrosoft Internet Explorer before 10 allows remote attackers to obtain sensitive information...CVE-2012-6502EPSS 10.1%2.6 LowJanuary 22, 2013
sixapart movable typelib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and 4.3x through 4.38 does not require...CVE-2013-0209Public exploitFix availableEPSS 45.2%7.5 HighJanuary 22, 2013
cisco webex training centerCisco WebEx Training Center allow remote authenticated users to bypass intended privilege...CVE-2013-11104.0 MediumJanuary 21, 2013
cisco webex training centerCisco WebEx Training Center allows remote authenticated users to remove hands-on lab-session...CVE-2013-11084.0 MediumJanuary 21, 2013
emc alphastorFormat string vulnerability in the _vsnsprintf function in rrobotd.exe in the Device Manager in...CVE-2013-09297.6 HighJanuary 21, 2013
emc alphastorThe NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before...CVE-2013-0928Public exploitEPSS 34.3%9.3 HighJanuary 21, 2013
siemens simatic rf-manager, simatic rf-manager 2008 +1 moreBuffer overflow in a third-party ActiveX component in Siemens SIMATIC RF-MANAGER 2008, and RF...CVE-2013-06566.8 MediumJanuary 21, 2013
3s-smart software solutions codesys, codesys control rte, codesys control runtime embedded +4 more +6 more3S CoDeSys Relative Path TraversalCVE-2012-606910.0 CriticalJanuary 21, 2013
3s-smart software solutions codesys, 3s-software codesys runtime system, 3s-smart software solutions codesys control rte +4 more +6 more3S CoDeSys Improper Access ControlCVE-2012-60689.8 CriticalJanuary 21, 2013
emc avamar, avamar plugin +1 moreEMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x,...CVE-2012-22917.2 HighJanuary 21, 2013
schneider-electric interactive graphical scada systemStack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System (IGSS) 10...CVE-2013-0657Public exploitEPSS 21.3%10.0 HighJanuary 21, 2013
schneider-electric software update utilityThe client in Schneider Electric Software Update (SESU) Utility 1.0.x and 1.1.x does not ensure...CVE-2013-06559.3 HighJanuary 21, 2013
phpThe openssl_encrypt function in ext/openssl/openssl.c in PHP 5.3.9 through 5.3.13 does not...CVE-2012-61135.0 MediumJanuary 19, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open