# CVEs published 2013-01-31

42 CVEs were published on January 31, 2013: 0 critical, 0 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2013-1591](https://cve.now/CVE-2013-1591.md): Stack-based buffer overflow in libpixman, as used in Pale Moon before 15.4 and possibly other products, has unspecified impact and context-d (no CVSS)
- [CVE-2012-5958](https://cve.now/CVE-2012-5958.md): Stack-based buffer overflow in the unique\_service\_name function in ssdp/ssdp\_server.c in the SSDP parser in the portable SDK for UPnP Device (no CVSS)
- [CVE-2012-5959](https://cve.now/CVE-2012-5959.md): Stack-based buffer overflow in the unique\_service\_name function in ssdp/ssdp\_server.c in the SSDP parser in the portable SDK for UPnP Device (no CVSS)
- [CVE-2012-5960](https://cve.now/CVE-2012-5960.md): Stack-based buffer overflow in the unique\_service\_name function in ssdp/ssdp\_server.c in the SSDP parser in the portable SDK for UPnP Device (no CVSS)
- [CVE-2012-5961](https://cve.now/CVE-2012-5961.md): Stack-based buffer overflow in the unique\_service\_name function in ssdp/ssdp\_server.c in the SSDP parser in the portable SDK for UPnP Device (no CVSS)
- [CVE-2012-5962](https://cve.now/CVE-2012-5962.md): Stack-based buffer overflow in the unique\_service\_name function in ssdp/ssdp\_server.c in the SSDP parser in the portable SDK for UPnP Device (no CVSS)
- [CVE-2012-5963](https://cve.now/CVE-2012-5963.md): Stack-based buffer overflow in the unique\_service\_name function in ssdp/ssdp\_server.c in the SSDP parser in the portable SDK for UPnP Device (no CVSS)
- [CVE-2012-5964](https://cve.now/CVE-2012-5964.md): Stack-based buffer overflow in the unique\_service\_name function in ssdp/ssdp\_server.c in the SSDP parser in the portable SDK for UPnP Device (no CVSS)
- [CVE-2012-5965](https://cve.now/CVE-2012-5965.md): Stack-based buffer overflow in the unique\_service\_name function in ssdp/ssdp\_server.c in the SSDP parser in the portable SDK for UPnP Device (no CVSS)
- [CVE-2013-0229](https://cve.now/CVE-2013-0229.md): The ProcessSSDPRequest function in minissdp.c in the SSDP handler in MiniUPnP MiniUPnPd before 1.4 allows remote attackers to cause a denial (no CVSS)
- [CVE-2013-0230](https://cve.now/CVE-2013-0230.md): Stack-based buffer overflow in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows (no CVSS)
- [CVE-2013-1461](https://cve.now/CVE-2013-1461.md): The ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows remote attackers to cause a de (no CVSS)
- [CVE-2013-1462](https://cve.now/CVE-2013-1462.md): Integer signedness error in the ExecuteSoapAction function in the SOAPAction handler in the HTTP service in MiniUPnP MiniUPnPd 1.0 allows re (no CVSS)
- [CVE-2013-0930](https://cve.now/CVE-2013-0930.md): Buffer overflow in Drive Control Program (DCP) in EMC AlphaStor 4.0 before build 814 allows remote attackers to execute arbitrary code via v (no CVSS)
- [CVE-2013-0431](https://cve.now/CVE-2013-0431.md): Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user- (CVSS 3.7, KEV)
- [CVE-2013-1489](https://cve.now/CVE-2013-1489.md): Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Update 11, when running on Windo (no CVSS)
- [CVE-2013-1490](https://cve.now/CVE-2013-1490.md): Unspecified vulnerability in Oracle Java SE 7 Update 11 (JRE 1.7.0\_11-b21) allows user-assisted remote attackers to bypass the Java security (no CVSS)
- [CVE-2012-0203](https://cve.now/CVE-2012-0203.md): Cross-site scripting (XSS) vulnerability in InfoSphere Metadata Workbench (MWB) 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8. (no CVSS)
- [CVE-2012-0204](https://cve.now/CVE-2012-0204.md): Untrusted search path vulnerability in InfoSphere Import Export Manager 8.1 through 9.1 in InfoSphere Information Server MetaBrokers & Bridg (no CVSS)
- [CVE-2012-0205](https://cve.now/CVE-2012-0205.md): InfoSphere Metadata Workbench (MWB) 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 does not properly rest (no CVSS)
- [CVE-2012-0700](https://cve.now/CVE-2012-0700.md): The client in InfoSphere FastTrack 8.1 through 8.7 in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 does not properly store (no CVSS)
- [CVE-2012-0701](https://cve.now/CVE-2012-0701.md): The client applications in the DataStage Administrator client in InfoSphere DataStage in IBM InfoSphere Information Server 8.1, 8.5 before F (no CVSS)
- [CVE-2012-0702](https://cve.now/CVE-2012-0702.md): Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 does not properly determine authoriza (no CVSS)
- [CVE-2012-0703](https://cve.now/CVE-2012-0703.md): Open redirect vulnerability in Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 allows (no CVSS)
- [CVE-2012-0705](https://cve.now/CVE-2012-0705.md): InfoSphere Import Export Manager in InfoSphere Information Server MetaBrokers & Bridges (MBB) in IBM InfoSphere Information Server 8.1, 8.5 (no CVSS)
- [CVE-2012-4819](https://cve.now/CVE-2012-4819.md): Cross-site scripting (XSS) vulnerability in InfoSphere Business Glossary 8.1.1 and 8.1.2, InfoSphere DataStage Operation Console, InfoSphere (no CVSS)
- [CVE-2012-4832](https://cve.now/CVE-2012-4832.md): Information Services Framework (ISF) in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 and InfoSphere Business Glossary 8.1. (no CVSS)
- [CVE-2012-6029](https://cve.now/CVE-2012-6029.md): Multiple cross-site scripting (XSS) vulnerabilities in the web-authentication function on the Cisco NAC Appliance 4.9.2 and earlier allow re (no CVSS)
- [CVE-2012-6350](https://cve.now/CVE-2012-6350.md): Cross-site scripting (XSS) vulnerability in the Web component in IBM Cognos TM1 before 9.5.2 FP3 and 10.1 before 10.1 FP1 allows remote atta (no CVSS)
- [CVE-2013-1112](https://cve.now/CVE-2013-1112.md): Cisco Carrier Routing System (CRS) allows remote attackers to cause a denial of service (packet loss) via short malformed packets that trigg (no CVSS)
- [CVE-2013-1113](https://cve.now/CVE-2013-1113.md): Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager allows remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2010-5287](https://cve.now/CVE-2010-5287.md): SQL injection vulnerability in default.php in Cornerstone Technologies webConductor allows remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2011-5255](https://cve.now/CVE-2011-5255.md): Multiple cross-site scripting (XSS) vulnerabilities in admin/login in X3 CMS 0.4.3.1 and earlier allow remote attackers to inject arbitrary (no CVSS)
- [CVE-2012-6522](https://cve.now/CVE-2012-6522.md): Directory traversal vulnerability in the getContent function in codes/wcms.php in w-CMS 2.01 allows remote attackers to read arbitrary files (no CVSS)
- [CVE-2012-6523](https://cve.now/CVE-2012-6523.md): Multiple cross-site scripting (XSS) vulnerabilities in w-CMS 2.01 allow remote attackers to inject arbitrary web script or HTML via (1) the (no CVSS)
- [CVE-2012-6524](https://cve.now/CVE-2012-6524.md): SQL injection vulnerability in kommentar.php in pGB 2.12 allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS)
- [CVE-2012-6525](https://cve.now/CVE-2012-6525.md): SQL injection vulnerability in members.php in PHPBridges allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS)
- [CVE-2012-6526](https://cve.now/CVE-2012-6526.md): SQL injection vulnerability in show\_code.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2012-6527](https://cve.now/CVE-2012-6527.md): Cross-site scripting (XSS) vulnerability in the My Calendar plugin before 1.10.2 for WordPress allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2012-6528](https://cve.now/CVE-2012-6528.md): Multiple cross-site scripting (XSS) vulnerabilities in ATutor before 2.1 allow remote attackers to inject arbitrary web script or HTML via t (no CVSS)
- [CVE-2012-6529](https://cve.now/CVE-2012-6529.md): Multiple SQL injection vulnerabilities in Marinet CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) g (no CVSS)
- [CVE-2012-6530](https://cve.now/CVE-2012-6530.md): Stack-based buffer overflow in Sysax Multi Server before 5.52, when HTTP is enabled, allows remote authenticated users with the create folde (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-01-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.