CVEs published January 5, 2013
4 CVEs were published on January 5, 2013: 0 critical, 0 high.
- Published
- 4
- Critical
- 0
- High
- 0
- Medium
- 2
- Low
- 0
- Unrated
- 2
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Red Hat JBoss Enterprise Application Platform
- 2
- org.apache.cxf:cxf
- 1
Medium, low and unrated 4
- CVE-2011-3937The H.263 codec (libavcodec/h263dec.c) in FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11, and unspecified versions before 0.10, and in Liba
- CVE-2012-2378Apache CXF 2.4.5 through 2.4.7, 2.5.1 through 2.5.3, and 2.6.x before 2.6.1, does not properly enforce child policies of a WS-SecurityPolicyorg.apache.cxf:cxf
- CVE-2012-4549Jboss enterprise application platform: org.jboss.as.ejb3: jboss enterprise application platform: access restriction bypass via improper ejb method authorizationRed Hat JBoss Enterprise Application Platform
- CVE-2012-4550Jboss enterprise application platform: jboss eap: jbeap: jboss enterprise application platform: unauthorized ejb access via authorization module bypassRed Hat JBoss Enterprise Application Platform