# CVEs published 2013-01-18

11 CVEs were published on January 18, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2009-4738](https://cve.now/CVE-2009-4738.md): Unspecified vulnerability in JustSystems Corporation ATOK 2006 through 2009 and ATOK flat-rate service, and Just Smile 4 with the ATOK Smile (no CVSS)
- [CVE-2009-5134](https://cve.now/CVE-2009-5134.md): Buffer overflow in the "create torrent dialog" functionality in uTorrent 1.8.3 build 15772, and possibly other versions before 1.8.3 (Build (no CVSS)
- [CVE-2012-5717](https://cve.now/CVE-2012-5717.md): Cisco Adaptive Security Appliances (ASA) devices with firmware 8.x through 8.4(1) do not properly manage SSH sessions, which allows remote a (no CVSS)
- [CVE-2012-6359](https://cve.now/CVE-2012-6359.md): IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.11, 6.2.1 before 6.2.1.3, and 6.2.2 before 6.2.2.2 and Tivoli Federated Iden (no CVSS)
- [CVE-2012-6360](https://cve.now/CVE-2012-6360.md): Cross-site scripting (XSS) vulnerability in IBM Intelligent Operations Center 1.5.0 allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2012-6395](https://cve.now/CVE-2012-6395.md): Cisco Adaptive Security Appliances (ASA) devices with firmware 8.4 do not properly validate unspecified input related to UNC share pathnames (no CVSS)
- [CVE-2012-2124](https://cve.now/CVE-2012-2124.md): functions/imap\_general.php in SquirrelMail, as used in Red Hat Enterprise Linux (RHEL) 4 and 5, does not properly handle 8-bit characters in (no CVSS)
- [CVE-2012-5531](https://cve.now/CVE-2012-5531.md): Multiple cross-site scripting (XSS) vulnerabilities in the GateIn Portal in JBoss Enterprise Portal Platform 5.2.2 allow remote attackers to (no CVSS)
- [CVE-2012-5656](https://cve.now/CVE-2012-5656.md): The rasterization process in Inkscape before 0.48.4 allows local users to read arbitrary files via an external entity in a SVG file, aka an (no CVSS)
- [CVE-2012-5875](https://cve.now/CVE-2012-5875.md): Firefly Media Server 1.0.0.1359 allows remote attackers to cause a denial of service (NULL pointer dereference) via a (1) crafted Connection (no CVSS)
- [CVE-2012-6088](https://cve.now/CVE-2012-6088.md): The rpmpkgRead function in lib/package.c in RPM 4.10.x before 4.10.2 does not return an error code in certain situations involving an "unpar (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-01-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.