# CVEs published 2013-01-02

14 CVEs were published on January 2, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2012-6460](https://cve.now/CVE-2012-6460.md): Opera before 11.67 and 12.x before 12.02 allows remote attackers to cause truncation of a dialog, and possibly trigger downloading and execu (no CVSS)
- [CVE-2012-6461](https://cve.now/CVE-2012-6461.md): The X.509 certificate-validation functionality in the https implementation in Opera before 12.10 allows remote attackers to trigger a false (no CVSS)
- [CVE-2012-6462](https://cve.now/CVE-2012-6462.md): Opera before 12.10 does not properly implement the Cross-Origin Resource Sharing (CORS) specification, which allows remote attackers to bypa (no CVSS)
- [CVE-2012-6463](https://cve.now/CVE-2012-6463.md): Cross-site scripting (XSS) vulnerability in Opera before 12.10 allows remote attackers to inject arbitrary web script or HTML via vectors in (no CVSS)
- [CVE-2012-6464](https://cve.now/CVE-2012-6464.md): Cross-site scripting (XSS) vulnerability in Opera before 12.10 allows remote attackers to inject arbitrary web script or HTML via crafted Ja (no CVSS)
- [CVE-2012-6465](https://cve.now/CVE-2012-6465.md): Opera before 12.10 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed SVG im (no CVSS)
- [CVE-2012-6466](https://cve.now/CVE-2012-6466.md): Opera before 12.10 does not properly handle incorrect size data in a WebP image, which allows remote attackers to obtain potentially sensiti (no CVSS)
- [CVE-2012-6467](https://cve.now/CVE-2012-6467.md): Opera before 12.10 follows Internet shortcuts that are referenced by a (1) IMG element or (2) other inline element, which makes it easier fo (no CVSS)
- [CVE-2012-6468](https://cve.now/CVE-2012-6468.md): Heap-based buffer overflow in Opera before 12.11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr (no CVSS)
- [CVE-2012-6469](https://cve.now/CVE-2012-6469.md): Opera before 12.11 allows remote attackers to determine the existence of arbitrary local files via vectors involving web script in an error (no CVSS)
- [CVE-2012-6470](https://cve.now/CVE-2012-6470.md): Opera before 12.12 does not properly allocate memory for GIF images, which allows remote attackers to execute arbitrary code or cause a deni (no CVSS)
- [CVE-2012-6471](https://cve.now/CVE-2012-6471.md): Opera before 12.12 allows remote attackers to spoof the address field via a high rate of HTTP requests. (no CVSS)
- [CVE-2012-6472](https://cve.now/CVE-2012-6472.md): Opera before 12.12 on UNIX uses weak permissions for the profile directory, which allows local users to obtain sensitive information by read (no CVSS)
- [CVE-2013-0721](https://cve.now/CVE-2013-0721.md): wp-php-widget.php in the WP PHP widget plugin 1.0.2 for WordPress allows remote attackers to obtain sensitive information via a direct reque (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-01-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.