CVEs published January 2, 2013
14 CVEs were published on January 2, 2013: 0 critical, 0 high.
- Published
- 14
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 14
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 14
- CVE-2012-6460Opera before 11.67 and 12.x before 12.02 allows remote attackers to cause truncation of a dialog, and possibly trigger downloading and execu
- CVE-2012-6461The X.509 certificate-validation functionality in the https implementation in Opera before 12.10 allows remote attackers to trigger a false
- CVE-2012-6462Opera before 12.10 does not properly implement the Cross-Origin Resource Sharing (CORS) specification, which allows remote attackers to bypa
- CVE-2012-6463Cross-site scripting (XSS) vulnerability in Opera before 12.10 allows remote attackers to inject arbitrary web script or HTML via vectors in
- CVE-2012-6464Cross-site scripting (XSS) vulnerability in Opera before 12.10 allows remote attackers to inject arbitrary web script or HTML via crafted Ja
- CVE-2012-6465Opera before 12.10 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed SVG im
- CVE-2012-6466Opera before 12.10 does not properly handle incorrect size data in a WebP image, which allows remote attackers to obtain potentially sensiti
- CVE-2012-6467Opera before 12.10 follows Internet shortcuts that are referenced by a (1) IMG element or (2) other inline element, which makes it easier fo
- CVE-2012-6468Heap-based buffer overflow in Opera before 12.11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr
- CVE-2012-6469Opera before 12.11 allows remote attackers to determine the existence of arbitrary local files via vectors involving web script in an error
- CVE-2012-6470Opera before 12.12 does not properly allocate memory for GIF images, which allows remote attackers to execute arbitrary code or cause a deni
- CVE-2012-6471Opera before 12.12 allows remote attackers to spoof the address field via a high rate of HTTP requests.
- CVE-2012-6472Opera before 12.12 on UNIX uses weak permissions for the profile directory, which allows local users to obtain sensitive information by read
- CVE-2013-0721wp-php-widget.php in the WP PHP widget plugin 1.0.2 for WordPress allows remote attackers to obtain sensitive information via a direct reque