# CVEs published 2013-02-05

10 CVEs were published on February 5, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2011-4575](https://cve.now/CVE-2011-4575.md): Cross-site scripting (XSS) vulnerability in the JMX console in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) (no CVSS)
- [CVE-2012-0034](https://cve.now/CVE-2012-0034.md): The NonManagedConnectionFactory in JBoss Enterprise Application Platform (EAP) 5.1.2 and 5.2.0, Web Platform (EWP) 5.1.2 and 5.2.0, and BRMS (no CVSS)
- [CVE-2012-0874](https://cve.now/CVE-2012-0874.md): The (1) JMXInvokerHAServlet and (2) EJBInvokerHAServlet invoker servlets in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Pl (no CVSS)
- [CVE-2012-3369](https://cve.now/CVE-2012-3369.md): The CallerIdentityLoginModule in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform be (no CVSS)
- [CVE-2012-3370](https://cve.now/CVE-2012-3370.md): The SecurityAssociation.getCredential method in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, B (no CVSS)
- [CVE-2012-5478](https://cve.now/CVE-2012-5478.md): The AuthorizationInterceptor in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform bef (no CVSS)
- [CVE-2013-0176](https://cve.now/CVE-2013-0176.md): The publickey\_from\_privatekey function in libssh before 0.5.4, when no algorithm is matched during negotiations, allows remote attackers to (no CVSS)
- [CVE-2013-0218](https://cve.now/CVE-2013-0218.md): The GUI installer in JBoss Enterprise Application Platform (EAP) and Enterprise Web Platform (EWP) 5.2.0 and possibly 5.1.2 uses world-reada (no CVSS)
- [CVE-2011-1350](https://cve.now/CVE-2011-1350.md): The PowerVR SGX driver in Android before 2.3.6 allows attackers to obtain potentially sensitive information from kernel stack memory via an (no CVSS)
- [CVE-2011-1352](https://cve.now/CVE-2011-1352.md): The PowerVR SGX driver in Android before 2.3.6 allows attackers to gain root privileges via an application that triggers kernel memory corru (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-02-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.