# CVEs published 2013-01-21 10 CVEs were published on January 21, 2013: 2 critical, 0 high. Days are UTC. - [CVE-2012-2291](https://cve.now/CVE-2012-2291.md): EMC Avamar Client 4.x, 5.x, and 6.x on HP-UX and Mac OS X, and the EMC Avamar plugin 4.x, 5.x, and 6.x for Oracle, uses world-writable permi (no CVSS) - [CVE-2012-6068](https://cve.now/CVE-2012-6068.md): 3S CoDeSys Improper Access Control (CVSS 9.8, 3S-Smart Software Solutions CODESYS Control Runtime embe… +4) - [CVE-2012-6069](https://cve.now/CVE-2012-6069.md): 3S CoDeSys Relative Path Traversal (CVSS 10.0, 3S-Smart Software Solutions CODESYS Control Runtime embe… +4) - [CVE-2013-0656](https://cve.now/CVE-2013-0656.md): Buffer overflow in a third-party ActiveX component in Siemens SIMATIC RF-MANAGER 2008, and RF-MANAGER Basic 3.0 and earlier, allows remote a (no CVSS) - [CVE-2013-0928](https://cve.now/CVE-2013-0928.md): The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execut (no CVSS) - [CVE-2013-0929](https://cve.now/CVE-2013-0929.md): Format string vulnerability in the \_vsnsprintf function in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows re (no CVSS) - [CVE-2013-1108](https://cve.now/CVE-2013-1108.md): Cisco WebEx Training Center allows remote authenticated users to remove hands-on lab-session reservations via a crafted URL, aka Bug ID CSCz (no CVSS) - [CVE-2013-1110](https://cve.now/CVE-2013-1110.md): Cisco WebEx Training Center allow remote authenticated users to bypass intended privilege restrictions and (1) enable or (2) disable trainin (no CVSS) - [CVE-2013-0655](https://cve.now/CVE-2013-0655.md): The client in Schneider Electric Software Update (SESU) Utility 1.0.x and 1.1.x does not ensure that updates have a valid origin, which allo (no CVSS) - [CVE-2013-0657](https://cve.now/CVE-2013-0657.md): Stack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System (IGSS) 10 and earlier allows remote attackers to execut (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-01-21 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.