CVEs published January 24, 2013
44 CVEs were published on January 24, 2013: 1 critical, 4 high.
- Published
- 44
- Critical
- 1
- High
- 4
- Medium
- 1
- Low
- 0
- Unrated
- 38
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Rockwell Automation 1756-ENBT, 1756-EWEB, 1768-ENBT, 176… +6
- 8
Critical 1
High 4
- CVE-2012-6435Rockwell Automation ControlLogix PLC Improper Access ControlRockwell Automation 1756-ENBT, 1756-EWEB, 1768-ENBT, 176… +6
- CVE-2012-6436Rockwell Automation ControlLogix PLC Improper Input ValidationRockwell Automation 1756-ENBT, 1756-EWEB, 1768-ENBT, 176… +6
- CVE-2012-6438Rockwell Automation ControlLogix PLC Improper Input ValidationRockwell Automation 1756-ENBT, 1756-EWEB, 1768-ENBT, 176… +6
- CVE-2012-6442Rockwell Automation ControlLogix PLC Improper Access ControlRockwell Automation 1756-ENBT, 1756-EWEB, 1768-ENBT, 176… +6
Medium, low and unrated 39
- CVE-2012-5668FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors rela
- CVE-2012-5669The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (crash) and possibl
- CVE-2012-5670The _bdf_parse_glyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service (out-of-bounds writ
- CVE-2012-6095ProFTPD before 1.3.5rc1, when using the UserOwner directive, allows local users to modify the ownership of arbitrary files via a race condit
- CVE-2012-6439Rockwell Automation ControlLogix PLC Improper Access ControlRockwell Automation 1756-ENBT, 1756-EWEB, 1768-ENBT, 176… +6
- CVE-2012-6440Rockwell Automation ControlLogix PLC Improper Input ValidationRockwell Automation 1756-ENBT, 1756-EWEB, 1768-ENBT, 176… +6
- CVE-2012-6441Rockwell Automation ControlLogix PLC Information ExposureRockwell Automation 1756-ENBT, 1756-EWEB, 1768-ENBT, 176… +6
- CVE-2013-0839Use-after-free vulnerability in Google Chrome before 24.0.1312.56 allows remote attackers to cause a denial of service or possibly have unsp
- CVE-2013-0840Google Chrome before 24.0.1312.56 does not validate URLs during the opening of new windows, which has unspecified impact and remote attack v
- CVE-2013-0841Array index error in the content-blocking functionality in Google Chrome before 24.0.1312.56 allows remote attackers to cause a denial of se
- CVE-2013-0842Google Chrome before 24.0.1312.56 does not properly handle %00 characters in pathnames, which has unspecified impact and attack vectors.
- CVE-2013-0843content/renderer/media/webrtc_audio_renderer.cc in Google Chrome before 24.0.1312.56 on Mac OS X does not use an appropriate buffer size for
- CVE-2013-1102The Wireless Intrusion Prevention System (wIPS) component on Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.0,
- CVE-2013-1103Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.220.0, 7.1 before 7.1.91.0, and 7.2 before 7.2.103.0 allow remote a
- CVE-2013-1104The HTTP Profiling functionality on Cisco Wireless LAN Controller (WLC) devices with software 7.3.101.0 allows remote authenticated users to
- CVE-2013-1105Cisco Wireless LAN Controller (WLC) devices with software 7.0 before 7.0.235.3, 7.1 and 7.2 before 7.2.111.3, and 7.3 before 7.3.101.0 allow
- CVE-2011-4618Cross-site scripting (XSS) vulnerability in advancedtext.php in Advanced Text Widget plugin before 2.0.2 for WordPress allows remote attacke
- CVE-2012-1922Multiple cross-site request forgery (CSRF) vulnerabilities in Sitecom WLM-2501 allow remote attackers to hijack the authentication of admini
- CVE-2012-2099Multiple cross-site scripting (XSS) vulnerabilities in Wikidforum 2.10 allow remote attackers to inject arbitrary web script or HTML via the
- CVE-2012-6085The read_block function in g10/import.c in GnuPG 1.4.x before 1.4.13 and 2.0.x through 2.0.19, when importing a key, allows remote attackers
- CVE-2012-6503Unspecified vulnerability in the NinjaXplorer component before 1.0.7 for Joomla! has unknown impact and attack vectors.
- CVE-2012-6504SQL injection vulnerability in mods/hours/data/get_hours.php in PHP Volunteer Management 1.0.2 allows remote attackers to execute arbitrary
- CVE-2012-6505Cross-site scripting (XSS) vulnerability in mods/hours/data/get_hours.php in PHP Volunteer Management 1.0.2 allows remote attackers to injec
- CVE-2012-6506Multiple cross-site scripting (XSS) vulnerabilities in the Zingiri Web Shop plugin 2.4.0 for WordPress allow remote attackers to inject arbi
- CVE-2012-6507Multiple SQL injection vulnerabilities in admin.php in ChurchCMS 0.0.1 allow remote attackers to execute arbitrary SQL commands via the (1)
- CVE-2012-6508Multiple cross-site request forgery (CSRF) vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to hijack the authenticatio
- CVE-2012-6509Unrestricted file upload vulnerability in NetArt Media Car Portal 3.0 allows remote attackers to execute arbitrary PHP code by uploading a f
- CVE-2012-6510Multiple cross-site scripting (XSS) vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to inject arbitrary web script or
- CVE-2012-6511Multiple cross-site scripting (XSS) vulnerabilities in organizer/page/users.php in the Organizer plugin 1.2.1 for WordPress allow remote att
- CVE-2012-6512The Organizer plugin 1.2.1 for WordPress allows remote attackers to obtain the installation path via unspecified vectors to (1) plugin_hook.
- CVE-2012-6513Cross-site scripting (XSS) vulnerability in index.php/Admin_Preferences in gpEasy CMS 2.3.3 allows remote attackers to inject arbitrary web
- CVE-2012-6514Cross-site scripting (XSS) vulnerability in the nBill (com_nbill) component 2.3.2 for Joomla! allows remote attackers to inject arbitrary we
- CVE-2012-6515eFront 3.6.10, 3.6.11 build 15059, and earlier allows remote attackers to obtain sensitive information via invalid courses_ID parameter in t
- CVE-2012-6516SQL injection vulnerability in PHP Ticket System Beta 1 allows remote attackers to execute arbitrary SQL commands via the q parameter to ind
- CVE-2012-6517Multiple cross-site scripting (XSS) vulnerabilities in DiY-CMS 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1)
- CVE-2012-6518Cross-site request forgery (CSRF) vulnerability in mod.php in DiY-CMS 1.0 allows remote attackers to hijack the authentication of administra
- CVE-2012-6519SQL injection vulnerability in modules/poll/index.php in DIY-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the start
- CVE-2012-6520Multiple SQL injection vulnerabilities in the advanced search in Wikidforum 2.10 allow remote attackers to execute arbitrary SQL commands vi
- CVE-2012-6521Cross-site scripting (XSS) vulnerability in apps/admin/handlers/versions.php in Elefant CMS 1.2.0 allows remote attackers to inject arbitrar