# CVEs published 2012-01-24

23 CVEs were published on January 24, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-0040](https://cve.now/CVE-2012-0040.md): Cross-site scripting (XSS) vulnerability in modules/core/www/no\_cookie.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 a (no CVSS)
- [CVE-2012-0069](https://cve.now/CVE-2012-0069.md): SQL injection vulnerability in ajax.php in Batavi before 1.2.1 allows remote attackers to execute arbitrary SQL commands via the boxToReload (no CVSS)
- [CVE-2012-0389](https://cve.now/CVE-2012-0389.md): Cross-site scripting (XSS) vulnerability in ForgottenPassword.aspx in MailEnable Professional, Enterprise, and Premium 4.26 and earlier, 5.x (no CVSS)
- [CVE-2012-0790](https://cve.now/CVE-2012-0790.md): Cross-site scripting (XSS) vulnerability in smokeping\_cgi in Smokeping 2.4.2, 2.6.6, and other versions before 2.6.7 allows remote attackers (no CVSS)
- [CVE-2012-0791](https://cve.now/CVE-2012-0791.md): Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP before 5.0.18 and Horde Groupware Webmail Edition before 4.0.6 allow remote (no CVSS)
- [CVE-2012-0908](https://cve.now/CVE-2012-0908.md): Cross-site scripting (XSS) vulnerability in logout.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attacke (no CVSS)
- [CVE-2012-0909](https://cve.now/CVE-2012-0909.md): Cross-site scripting (XSS) vulnerability in Horde\_Form in Horde Groupware Webmail Edition before 4.0.6 allows remote attackers to inject arb (no CVSS)
- [CVE-2012-0913](https://cve.now/CVE-2012-0913.md): SQL injection vulnerability in checklogin.aspx in ICloudCenter ICTimeAttendance 1.0 allows remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2012-0914](https://cve.now/CVE-2012-0914.md): Cross-site scripting (XSS) vulnerability in display\_renderers/panels\_renderer\_editor.class.php in the admin view in the Panels module 6.x-2. (no CVSS)
- [CVE-2012-0915](https://cve.now/CVE-2012-0915.md): Integer signedness error in RenRen Talk 2.9 allows remote attackers to execute arbitrary code via crafted dimensions of a skin file, leading (no CVSS)
- [CVE-2012-0916](https://cve.now/CVE-2012-0916.md): Heap-based buffer overflow in RenRen Talk 2.9 allows remote attackers to execute arbitrary code via a crafted image in a chat message, as de (no CVSS)
- [CVE-2012-0917](https://cve.now/CVE-2012-0917.md): Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Analyzer 02-01, 02-51 through 02-51-01, and 02-53 through 02-53-02 allows (no CVSS)
- [CVE-2012-0918](https://cve.now/CVE-2012-0918.md): Unspecified vulnerability in Hitachi COBOL2002 Net Developer, Net Server Suite, and Net Client Suite 01-00, 01-01 through 01-01-/D, 01-02 th (no CVSS)
- [CVE-2012-0919](https://cve.now/CVE-2012-0919.md): Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00 through 03-00-04, and possibly o (no CVSS)
- [CVE-2012-0285](https://cve.now/CVE-2012-0285.md): Multiple cross-site scripting (XSS) vulnerabilities in Stoneware webNetwork before 6.0.8.0 allow remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2012-0286](https://cve.now/CVE-2012-0286.md): Cross-site request forgery (CSRF) vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to hijack the authentication (no CVSS)
- [CVE-2012-0912](https://cve.now/CVE-2012-0912.md): SQL injection vulnerability in Stoneware webNetwork before 6.0.8.0 allows remote attackers to execute arbitrary SQL commands via unspecified (no CVSS)
- [CVE-2011-3924](https://cve.now/CVE-2011-3924.md): Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspe (no CVSS)
- [CVE-2011-3925](https://cve.now/CVE-2011-3925.md): Use-after-free vulnerability in the Safe Browsing feature in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of s (no CVSS)
- [CVE-2011-3926](https://cve.now/CVE-2011-3926.md): Heap-based buffer overflow in the tree builder in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or p (no CVSS)
- [CVE-2011-3927](https://cve.now/CVE-2011-3927.md): Skia, as used in Google Chrome before 16.0.912.77, does not perform all required initialization of values, which allows remote attackers to (no CVSS)
- [CVE-2011-3928](https://cve.now/CVE-2011-3928.md): Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspe (no CVSS)
- [CVE-2012-0313](https://cve.now/CVE-2012-0313.md): Cross-site scripting (XSS) vulnerability in glucose 2 before stage 6.2 allows remote attackers to inject arbitrary web script or HTML via an (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-01-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.