# CVEs published 2013-02-14

9 CVEs were published on February 14, 2013: 0 critical, 2 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2012-5564](https://cve.now/CVE-2012-5564.md): android-tools 4.1.1 in Android Debug Bridge (ADB) allows local users to overwrite arbitrary files via a symlink attack on /tmp/adb.log. (no CVSS)
- [CVE-2012-5634](https://cve.now/CVE-2012-5634.md): Xen 4.2.x, 4.1.x, and 4.0, when using Intel VT-d for PCI passthrough, does not properly configure VT-d when supporting a device that is behi (no CVSS)
- [CVE-2013-0153](https://cve.now/CVE-2013-0153.md): The AMD IOMMU support in Xen 4.2.x, 4.1.x, 3.3, and other versions, when using AMD-Vi for PCI passthrough, uses the same interrupt remapping (no CVSS)
- [CVE-2013-1402](https://cve.now/CVE-2013-1402.md): DigiLIBE 3.4 and possibly other versions sends a redirect but does not exit, which allows remote attackers to obtain sensitive configuration (no CVSS)
- [CVE-2013-0701](https://cve.now/CVE-2013-0701.md): SQL injection vulnerability in Cybozu Garoon 2.5.0 through 3.5.3 allows remote authenticated users to execute arbitrary SQL commands by leve (no CVSS)
- [CVE-2013-0702](https://cve.now/CVE-2013-0702.md): Cross-site scripting (XSS) vulnerability in Cybozu Garoon 2.0.0 through 3.5.3 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2012-5188](https://cve.now/CVE-2012-5188.md): Untrusted search path vulnerability in mora Downloader before 1.0.0.1 allows remote attackers to trigger the launch of a .exe file via unspe (no CVSS)
- [CVE-2013-0640](https://cve.now/CVE-2013-0640.md): Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or c (CVSS 7.8, KEV)
- [CVE-2013-0641](https://cve.now/CVE-2013-0641.md): Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute (CVSS 7.8, KEV)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-02-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
