CVEs published January 4, 2013
22 CVEs were published on January 4, 2013: 0 critical, 0 high.
- Published
- 22
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 1
- Unrated
- 20
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- activerecord
- 1
- authlogic
- 1
- Red Hat CloudForms for RHEL · Red Hat CloudForms Tools f… +1
- 1
- Red Hat CloudForms for RHEL · Red Hat CloudForms Tools for…
- 1
Medium, low and unrated 22
- CVE-2011-4316Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, in certain unspecified conditions, does not lock the desktop screen between S
- CVE-2012-0860Multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, allow l
- CVE-2012-0861The vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, uses the -k curl parameter when down
- CVE-2012-2696The backend in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1 does not properly check privileges, which allows remote authent
- CVE-2012-3538Pulp in Red Hat CloudForms before 1.1 logs administrative passwords in a world-readable file, which allows local users to read pulp administ
- CVE-2012-4543Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.3 allow remote attackers to inject arbit
- CVE-2012-4555The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 does not properly handle interruptions of token form
- CVE-2012-4556The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 allows remote attackers to cause a denial of service
- CVE-2012-4574Pulp: red hat cloudforms: pulp in red hat cloudforms: information disclosure via world-readable configuration fileRed Hat CloudForms for RHEL · Red Hat CloudForms Tools f… +1
- CVE-2012-5516Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when moving disks between storage domains, does not properly wipe-after-delet
- CVE-2012-5581Stack-based buffer overflow in tif_dir.c in LibTIFF before 4.0.2 allows remote attackers to cause a denial of service (crash) and possibly e
- CVE-2012-5603proxies_controller.rb in Katello in Red Hat CloudForms before 1.1 does not properly check permissions, which allows remote authenticated use
- CVE-2012-5605Grinder: red hat cloudforms: grinder in red hat cloudforms: local users can modify cache files via world-writable permissionsRed Hat CloudForms for RHEL · Red Hat CloudForms Tools for…
- CVE-2012-6329The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and f
- CVE-2012-6330The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows remote attackers to c
- CVE-2012-6348Centrify Deployment Manager 2.1.0.283, as distributed in Centrify Suite before 2012.5, allows local users to (1) overwrite arbitrary files v
- CVE-2012-5977Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.11 before 1.8.11-cert10; and
- CVE-2012-5976Multiple stack consumption vulnerabilities in Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certi
- CVE-2012-6089Multiple stack-based buffer overflows in the canoniseFileName function in os/pl-os.c in SWI-Prolog before 6.2.5 and 6.3.x before 6.3.7 allow
- CVE-2012-6090Multiple stack-based buffer overflows in the expand function in os/pl-glob.c in SWI-Prolog before 6.2.5 and 6.3.x before 6.3.7 allow remote
- CVE-2012-6496SQL injection vulnerability in the Active Record component in Ruby on Rails before 3.0.18, 3.1.x before 3.1.9, and 3.2.x before 3.2.10 allowactiverecord
- CVE-2012-6497The Authlogic gem for Ruby on Rails, when used with certain versions before 3.2.10, makes potentially unsafe find_by_id method calls, which authlogic