# CVEs published 2012-01-13

14 CVEs were published on January 13, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2011-5060](https://cve.now/CVE-2011-5060.md): The par\_mktmpdir function in the PAR module before 1.003 for Perl creates temporary files in a directory with a predictable name without ver (no CVSS)
- [CVE-2011-2776](https://cve.now/CVE-2011-2776.md): Buffer overflow in the Error function in super.c in Super 3.30.0 might allow local users to execute arbitrary code via vectors related to sy (no CVSS)
- [CVE-2011-2939](https://cve.now/CVE-2011-2939.md): Off-by-one error in the decode\_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might allo (no CVSS)
- [CVE-2011-3597](https://cve.now/CVE-2011-3597.md): Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via (no CVSS)
- [CVE-2011-4057](https://cve.now/CVE-2011-4057.md): Wibu-Systems AG CodeMeter Runtime 4.30c, 4.10b, and possibly other versions before 4.40 allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2011-4114](https://cve.now/CVE-2011-4114.md): The par\_mktmpdir function in the PAR::Packer module before 1.012 for Perl creates temporary files in a directory with a predictable name wit (no CVSS)
- [CVE-2012-0030](https://cve.now/CVE-2012-0030.md): Nova 2011.3 and Essex, when using the OpenStack API, allows remote authenticated users to bypass access restrictions for tenants of other us (no CVSS)
- [CVE-2011-4788](https://cve.now/CVE-2011-4788.md): Absolute path traversal vulnerability in the web interface on HP StorageWorks P2000 G3 MSA array systems allows remote attackers to read arb (no CVSS)
- [CVE-2011-4789](https://cve.now/CVE-2011-4789.md): Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbi (no CVSS)
- [CVE-2011-4925](https://cve.now/CVE-2011-4925.md): Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 2.5.9, when munge authentication is used, allows remot (no CVSS)
- [CVE-2012-0309](https://cve.now/CVE-2012-0309.md): Cross-site scripting (XSS) vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and (no CVSS)
- [CVE-2012-0310](https://cve.now/CVE-2012-0310.md): CRLF injection vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier all (no CVSS)
- [CVE-2012-0696](https://cve.now/CVE-2012-0696.md): Multiple cross-site scripting (XSS) vulnerabilities in the Executive Viewer (EV) in IBM Cognos TM1 before 9.5 FP1 allow remote attackers to (no CVSS)
- [CVE-2012-0697](https://cve.now/CVE-2012-0697.md): HP StorageWorks P2000 G3 MSA array systems have a default account, which makes it easier for remote attackers to perform administrative task (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-01-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.