Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2013
January

CVEs published in January 2013

431 vulnerabilities, 104 critical, 6 exploited.

Known exploitedIn KEVPublic exploitFix available

apple iphone osWebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or...CVE-2013-09586.8 MediumJanuary 29, 2013
apple iphone osWebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or...CVE-2013-09566.8 MediumJanuary 29, 2013
apple iphone osWebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or...CVE-2013-09556.8 MediumJanuary 29, 2013
apple iphone osWebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or...CVE-2013-09546.8 MediumJanuary 29, 2013
apple iphone osWebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or...CVE-2013-09536.8 MediumJanuary 29, 2013
apple iphone osWebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or...CVE-2013-09526.8 MediumJanuary 29, 2013
apple iphone osWebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or...CVE-2013-09516.8 MediumJanuary 29, 2013
apple iphone osWebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or...CVE-2013-09506.8 MediumJanuary 29, 2013
apple iphone osWebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or...CVE-2013-09496.8 MediumJanuary 29, 2013
apple iphone osWebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or...CVE-2013-09486.8 MediumJanuary 29, 2013
rubyonrails rails, ruby on rails +1 moreactivesupport in Rails vulnerable to incorrect data conversionCVE-2013-0333Public exploitFix availableEPSS 95.6%7.5 HighJanuary 29, 2013
beijerelectronics beijer adp, h-designer +1 moreBuffer overflow in Beijer ADP 6.5.0-180_R1967 and 6.5.1-186_R2942, and H-Designer 6.5.0...CVE-2012-46966.9 MediumJanuary 28, 2013
moodle, tinymce spellchecker php +1 morePHP Spellchecker addon for TinyMCE allows attackers to trigger arbitrary outbound HTTP requestsCVE-2012-6112Fix available5.0 MediumJanuary 27, 2013
moodlecalendar/managesubscriptions.php in the Manage Subscriptions implementation in Moodle 2.4.x...CVE-2012-61065.5 MediumJanuary 27, 2013
moodleblog/rsslib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x...CVE-2012-61055.0 MediumJanuary 27, 2013
moodleblog/rsslib.php in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allows...CVE-2012-61045.0 MediumJanuary 27, 2013
moodleMultiple cross-site request forgery (CSRF) vulnerabilities in user/messageselect.php in the...CVE-2012-61036.8 MediumJanuary 27, 2013
moodlelib.php in the Submission comments plugin in the Assignment module in Moodle 2.3.x before 2.3.4...CVE-2012-61026.4 MediumJanuary 27, 2013
moodleMultiple open redirect vulnerabilities in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4...CVE-2012-61015.8 MediumJanuary 27, 2013
moodlereport/outline/index.php in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1...CVE-2012-61004.0 MediumJanuary 27, 2013
moodleMoodle Arbitrary File Read via Backup FunctionalityCVE-2012-6099Fix available4.0 MediumJanuary 27, 2013
moodlegrade/edit/outcome/edit_form.php in Moodle 1.9.x through 1.9.19, 2.1.x before 2.1.10, 2.2.x...CVE-2012-60984.0 MediumJanuary 27, 2013
ge intelligent platforms proficy hmi\/scada cimplicity, intelligent platforms proficy process systems, intelligent platforms proficy process systems with cimplicity +2 moreCimWebServer in GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY 4.01 through 8.0, and...CVE-2013-06549.3 HighJanuary 27, 2013
ge intelligent platforms proficy hmi\/scada cimplicity, intelligent platforms proficy process systems, intelligent platforms proficy process systems with cimplicity +2 moreDirectory traversal vulnerability in substitute.bcl in the WebView CimWeb subsystem in GE...CVE-2013-0653EPSS 19.1%4.3 MediumJanuary 27, 2013
ge intelligent platforms proficy real-time information portalGE Intelligent Platforms Proficy Real-Time Information Portal does not restrict access to methods...CVE-2013-06525.0 MediumJanuary 27, 2013
ge intelligent platforms proficy real-time information portalThe Portal installation process in GE Intelligent Platforms Proficy Real-Time Information Portal...CVE-2013-06515.0 MediumJanuary 27, 2013
ibm websphere application serverUnspecified vulnerability in IBM WebSphere Application Server (WAS) 6.1, 7.0 before 7.0.0.27, 8.0...CVE-2013-046210.0 HighJanuary 27, 2013
ibm websphere application serverCross-site scripting (XSS) vulnerability in the virtual member manager (VMM) administrative...CVE-2013-04614.3 MediumJanuary 27, 2013
ibm websphere application serverCross-site request forgery (CSRF) vulnerability in the portlet subsystem in the administrative...CVE-2013-04606.8 MediumJanuary 27, 2013
ibm websphere application serverCross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere...CVE-2013-04594.3 MediumJanuary 27, 2013
ibm websphere application serverCross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere...CVE-2013-04584.3 MediumJanuary 27, 2013
redhat freeipaThe client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification...CVE-2012-5484Fix available7.9 HighJanuary 27, 2013
tripadvisorThe TripAdvisor app 6.6 for iOS sends cleartext credentials, which allows remote attackers to...CVE-2012-49175.0 MediumJanuary 26, 2013
coolpdfStack-based buffer overflow in the reader in CoolPDF 3.0.2.256 allows remote attackers to execute...CVE-2012-4914Public exploitEPSS 28.4%9.3 HighJanuary 26, 2013
foxitsoftware foxit advanced pdf editorStack-based buffer overflow in Foxit Advanced PDF Editor 3 before 3.04 might allow remote...CVE-2013-01077.6 HighJanuary 26, 2013
tp-link tl-wr841n, tl-wr841n firmware +1 moreDirectory traversal vulnerability in the web-based management interface on the TP-LINK TL-WR841N...CVE-2012-6276Public exploit4.3 MediumJanuary 26, 2013
suse webyastSUSE WebYaST before 1.2 0.2.63-0.6.1 allows remote attackers to modify the hosts list, and...CVE-2012-04355.8 MediumJanuary 26, 2013
hp diagnostics serverStack-based buffer overflow in magentservice.exe in HP Diagnostics Server 8.x through 8.07 and 9...CVE-2012-3278EPSS 11.1%10.0 HighJanuary 25, 2013
dell openmanage server administratorMultiple cross-site scripting (XSS) vulnerabilities in Dell OpenManage Server Administrator 6.5.0...CVE-2012-6272Public exploit4.3 MediumJanuary 25, 2013
isc bind, canonical ubuntu linux, redhat enterprise linux desktop +5 more +7 moreISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving...CVE-2012-5689Fix availableEPSS 12.1%7.1 HighJanuary 25, 2013
cisco 2000 wireless lan controller, 2100 wireless lan controller, 2500 wireless lan controller +4 more +6 moreCisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and 7.2...CVE-2013-11059.0 HighJanuary 24, 2013
cisco 2000 wireless lan controller, 2100 wireless lan controller, 2500 wireless lan controller +6 more +8 moreThe HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3...CVE-2013-11049.0 HighJanuary 24, 2013
cisco 2000 wireless lan controller, 2100 wireless lan controller, 2500 wireless lan controller +6 more +8 moreCisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.220.0, 7.1 before 7.1.91...CVE-2013-11037.8 HighJanuary 24, 2013
cisco 2000 wireless lan controller, 2100 wireless lan controller, 2500 wireless lan controller +6 more +8 moreThe Wireless Intrusion Prevention System (wIPS) component on Cisco Wireless LAN Controller (WLC)...CVE-2013-11027.8 HighJanuary 24, 2013
google chromecontent/renderer/media/webrtc_audio_renderer.cc in Google Chrome before 24.0.1312.56 on Mac OS X...CVE-2013-08437.5 HighJanuary 24, 2013
google chromeGoogle Chrome before 24.0.1312.56 does not properly handle %00 characters in pathnames, which has...CVE-2013-084210.0 HighJanuary 24, 2013
google chromeArray index error in the content-blocking functionality in Google Chrome before 24.0.1312.56...CVE-2013-08417.5 HighJanuary 24, 2013
google chromeGoogle Chrome before 24.0.1312.56 does not validate URLs during the opening of new windows, which...CVE-2013-084010.0 HighJanuary 24, 2013
google chromeUse-after-free vulnerability in Google Chrome before 24.0.1312.56 allows remote attackers to...CVE-2013-08397.5 HighJanuary 24, 2013
rockwell automation 1788-enbt flexlogix adapter, 1794-aentr flex i/o ethernet/ip adapter, compactlogix l32e and l35e controllers +17 more +19 moreRockwell Automation ControlLogix PLC Improper Access ControlCVE-2012-6442EPSS 35.3%7.8 January 24, 2013
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open