# CVEs published 2013-01-22 10 CVEs were published on January 22, 2013: 0 critical, 0 high. Days are UTC. - [CVE-2012-2119](https://cve.now/CVE-2012-2119.md): Buffer overflow in the macvtap device driver in the Linux kernel before 3.4.5, when running in certain configurations, allows privileged KVM (no CVSS) - [CVE-2012-2137](https://cve.now/CVE-2012-2137.md): Buffer overflow in virt/kvm/irq\_comm.c in the KVM subsystem in the Linux kernel before 3.2.24 allows local users to cause a denial of servic (no CVSS) - [CVE-2012-2372](https://cve.now/CVE-2012-2372.md): The rds\_ib\_xmit function in net/rds/ib\_send.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel 3.7.4 and e (no CVSS) - [CVE-2012-3364](https://cve.now/CVE-2012-3364.md): Multiple stack-based buffer overflows in the Near Field Communication Controller Interface (NCI) in the Linux kernel before 3.4.5 allow remo (no CVSS) - [CVE-2012-4414](https://cve.now/CVE-2012-4414.md): Multiple SQL injection vulnerabilities in the replication code in Oracle MySQL possibly before 5.5.29, and MariaDB 5.1.x through 5.1.62, 5.2 (no CVSS) - [CVE-2012-4461](https://cve.now/CVE-2012-4461.md): The KVM subsystem in the Linux kernel before 3.6.9, when running on hosts that use qemu userspace without XSAVE, allows local users to cause (no CVSS) - [CVE-2012-4918](https://cve.now/CVE-2012-4918.md): Call of Duty Elite for iOS 2.0.1 does not properly validate the server SSL certificate, which allows remote attackers to obtain sensitive in (no CVSS) - [CVE-2012-5616](https://cve.now/CVE-2012-5616.md): Apache CloudStack 4.0.0-incubating and Citrix CloudPlatform (formerly Citrix CloudStack) before 3.0.6 stores sensitive information in the lo (no CVSS) - [CVE-2012-6096](https://cve.now/CVE-2012-6096.md): Multiple stack-based buffer overflows in the get\_history function in history.cgi in Nagios Core before 3.4.4, and Icinga 1.6.x before 1.6.2, (no CVSS) - [CVE-2012-6502](https://cve.now/CVE-2012-6502.md): Microsoft Internet Explorer before 10 allows remote attackers to obtain sensitive information about the existence of files, and read certain (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2013-01-22 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.