# CVEs published 2013-01-01

6 CVEs were published on January 1, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2012-6084](https://cve.now/CVE-2012-6084.md): modules/m\_capab.c in (1) ircd-ratbox before 3.0.8 and (2) Charybdis before 3.4.2 does not properly support capability negotiation during ser (no CVSS)
- [CVE-2012-6426](https://cve.now/CVE-2012-6426.md): LemonLDAP::NG before 1.2.3 does not use the signature-verification capability of the Lasso library, which allows remote attackers to bypass (no CVSS)
- [CVE-2012-6459](https://cve.now/CVE-2012-6459.md): ConnMan 1.3 on Tizen continues to list the bluetooth service after offline mode has been enabled, which might allow remote attackers to obta (no CVSS)
- [CVE-2012-4970](https://cve.now/CVE-2012-4970.md): Cross-site scripting (XSS) vulnerability in the web management interface on Polycom HDX Video End Points with UC APL software before 2.7.1.1 (no CVSS)
- [CVE-2012-5573](https://cve.now/CVE-2012-5573.md): The connection\_edge\_process\_relay\_cell function in or/relay.c in Tor before 0.2.3.25 maintains circuits even if an unexpected SENDME cell ar (no CVSS)
- [CVE-2012-5769](https://cve.now/CVE-2012-5769.md): IBM SPSS Modeler 14.0, 14.1, 14.2 through FP3, and 15.0 before FP2 allows remote attackers to read arbitrary files, and possibly send HTTP r (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-01-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.