# CVEs published 2013-02-05

10 CVEs were published on February 5, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2011-4575](https://cve.now/CVE-2011-4575.md): Cross-site scripting (XSS) vulnerability in the JMX console in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform… (no CVSS)
- [CVE-2012-0034](https://cve.now/CVE-2012-0034.md): The NonManagedConnectionFactory in JBoss Enterprise Application Platform (EAP) 5.1.2 and 5.2.0, Web Platform (EWP) 5.1.2 and 5.2.0, and… (no CVSS)
- [CVE-2012-0874](https://cve.now/CVE-2012-0874.md): The (1) JMXInvokerHAServlet and (2) EJBInvokerHAServlet invoker servlets in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web… (no CVSS)
- [CVE-2012-3369](https://cve.now/CVE-2012-3369.md): The CallerIdentityLoginModule in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform… (no CVSS)
- [CVE-2012-3370](https://cve.now/CVE-2012-3370.md): The SecurityAssociation.getCredential method in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0… (no CVSS)
- [CVE-2012-5478](https://cve.now/CVE-2012-5478.md): The AuthorizationInterceptor in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform… (no CVSS)
- [CVE-2013-0176](https://cve.now/CVE-2013-0176.md): The publickey\_from\_privatekey function in libssh before 0.5.4, when no algorithm is matched during negotiations, allows remote attackers… (no CVSS)
- [CVE-2013-0218](https://cve.now/CVE-2013-0218.md): The GUI installer in JBoss Enterprise Application Platform (EAP) and Enterprise Web Platform (EWP) 5.2.0 and possibly 5.1.2 uses… (no CVSS)
- [CVE-2011-1350](https://cve.now/CVE-2011-1350.md): The PowerVR SGX driver in Android before 2.3.6 allows attackers to obtain potentially sensitive information from kernel stack memory via… (no CVSS)
- [CVE-2011-1352](https://cve.now/CVE-2011-1352.md): The PowerVR SGX driver in Android before 2.3.6 allows attackers to gain root privileges via an application that triggers kernel memory… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2013-02-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
