# CVEs published 2013-01-26

5 CVEs were published on January 26, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2012-4914](https://cve.now/CVE-2012-4914.md): Stack-based buffer overflow in the reader in CoolPDF 3.0.2.256 allows remote attackers to execute arbitrary code via a PDF document with a c (no CVSS)
- [CVE-2012-4917](https://cve.now/CVE-2012-4917.md): The TripAdvisor app 6.6 for iOS sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the n (no CVSS)
- [CVE-2012-0435](https://cve.now/CVE-2012-0435.md): SUSE WebYaST before 1.2 0.2.63-0.6.1 allows remote attackers to modify the hosts list, and subsequently conduct man-in-the-middle attacks, v (no CVSS)
- [CVE-2012-6276](https://cve.now/CVE-2012-6276.md): Directory traversal vulnerability in the web-based management interface on the TP-LINK TL-WR841N router with firmware 3.13.9 build 120201 Re (no CVSS)
- [CVE-2013-0107](https://cve.now/CVE-2013-0107.md): Stack-based buffer overflow in Foxit Advanced PDF Editor 3 before 3.04 might allow remote attackers to execute arbitrary code via a crafted (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-01-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.