# CVEs published 2013-02-08

21 CVEs were published on February 8, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-0170](https://cve.now/CVE-2013-0170.md): Use-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in libvirt 1.0.x before 1.0.2, 0.10.2 before 0.10 (no CVSS)
- [CVE-2013-0189](https://cve.now/CVE-2013-0189.md): cachemgr.cgi in Squid 3.1.x and 3.2.x, possibly 3.1.22, 3.2.4, and other versions, allows remote attackers to cause a denial of service (res (no CVSS)
- [CVE-2013-0242](https://cve.now/CVE-2013-0242.md): Buffer overflow in the extend\_buffers function in the regular expression matcher (posix/regexec.c) in glibc, possibly 2.17 and earlier, allo (no CVSS)
- [CVE-2013-0262](https://cve.now/CVE-2013-0262.md): rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended (no CVSS, rack)
- [CVE-2013-0263](https://cve.now/CVE-2013-0263.md): Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows (no CVSS, rack)
- [CVE-2013-1465](https://cve.now/CVE-2013-1465.md): The Cubecart::\_basket method in classes/cubecart.class.php in CubeCart 5.0.0 through 5.2.0 allows remote attackers to unserialize arbitrary (no CVSS)
- [CVE-2012-2686](https://cve.now/CVE-2012-2686.md): crypto/evp/e\_aes\_cbc\_hmac\_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2 implementations in OpenSSL 1.0.1 before 1.0.1d allows re (no CVSS)
- [CVE-2013-0166](https://cve.now/CVE-2013-0166.md): OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, whi (no CVSS)
- [CVE-2013-0169](https://cve.now/CVE-2013-0169.md): The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly c (no CVSS)
- [CVE-2013-1618](https://cve.now/CVE-2013-1618.md): The TLS implementation in Opera before 12.13 does not properly consider timing side-channel attacks on a MAC check operation during the proc (no CVSS)
- [CVE-2013-1619](https://cve.now/CVE-2013-1619.md): The TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does not properly consider timing side-channel (no CVSS)
- [CVE-2013-1620](https://cve.now/CVE-2013-1620.md): The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant M (no CVSS)
- [CVE-2013-1621](https://cve.now/CVE-2013-1621.md): Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to cause a denial of service via vectors involving (no CVSS)
- [CVE-2013-1623](https://cve.now/CVE-2013-1623.md): The TLS and DTLS implementations in wolfSSL CyaSSL before 2.5.0 do not properly consider timing side-channel attacks on a noncompliant MAC c (no CVSS)
- [CVE-2013-1624](https://cve.now/CVE-2013-1624.md): The TLS implementation in the Bouncy Castle Java library before 1.48 and C# library before 1.8 does not properly consider timing side-channe (no CVSS, org.bouncycastle:bcprov-jdk15on)
- [CVE-2013-0633](https://cve.now/CVE-2013-0633.md): Buffer overflow in Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x b (no CVSS)
- [CVE-2013-0634](https://cve.now/CVE-2013-0634.md): Adobe Flash Player before 10.3.183.51 and 11.x before 11.5.502.149 on Windows and Mac OS X, before 10.3.183.51 and 11.x before 11.2.202.262 (no CVSS)
- [CVE-2013-1637](https://cve.now/CVE-2013-1637.md): Opera before 12.13 allows remote attackers to execute arbitrary code via vectors involving DOM events. (no CVSS)
- [CVE-2013-1638](https://cve.now/CVE-2013-1638.md): Opera before 12.13 allows remote attackers to execute arbitrary code via crafted clipPaths in an SVG document. (no CVSS)
- [CVE-2013-1639](https://cve.now/CVE-2013-1639.md): Opera before 12.13 does not send CORS preflight requests in all required cases, which allows remote attackers to bypass a CSRF protection me (no CVSS)
- [CVE-2012-4700](https://cve.now/CVE-2012-4700.md): Multiple buffer overflows in an ActiveX control in PE3DO32A.ocx in IntegraXor SCADA Server 4.00 build 4250.0 and earlier allow remote attack (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-02-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.