# CVEs published 2012-01-15

7 CVEs were published on January 15, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2011-1362](https://cve.now/CVE-2011-1362.md): Cross-site scripting (XSS) vulnerability in the Installation Verification Test (IVT) application in the Install component in IBM WebSphere A (no CVSS)
- [CVE-2011-1377](https://cve.now/CVE-2011-1377.md): The Web Services Security component in the Web Services Feature Pack before 6.1.0.41 for IBM WebSphere Application Server (WAS) 6.1 does not (no CVSS)
- [CVE-2011-4868](https://cve.now/CVE-2011-4868.md): The logging functionality in dhcpd in ISC DHCP before 4.2.3-P2, when using Dynamic DNS (DDNS) and issuing IPv6 addresses, does not properly (no CVSS)
- [CVE-2011-5065](https://cve.now/CVE-2011-5065.md): Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41 allows remote attackers to inject arb (no CVSS)
- [CVE-2011-5066](https://cve.now/CVE-2011-5066.md): The SibRaRecoverableSiXaResource class in the Default Messaging Component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41 does (no CVSS)
- [CVE-2012-0266](https://cve.now/CVE-2012-0266.md): Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbitrary code via (1) a l (no CVSS)
- [CVE-2012-0267](https://cve.now/CVE-2012-0267.md): The StopModule method in the NTR ActiveX control before 2.0.4.8 allows remote attackers to execute arbitrary code via a crafted lModule para (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-01-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.