# CVEs published 2013-02-15

11 CVEs were published on February 15, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2012-4694](https://cve.now/CVE-2012-4694.md): Moxa EDR-G903 series routers with firmware before 2.11 do not use a sufficient source of entropy for (1) SSH and (2) SSL keys, which makes i (no CVSS)
- [CVE-2012-4701](https://cve.now/CVE-2012-4701.md): Directory traversal vulnerability in Tridium Niagara AX 3.5, 3.6, and 3.7 allows remote attackers to read sensitive files, and consequently (no CVSS)
- [CVE-2012-4711](https://cve.now/CVE-2012-4711.md): Buffer overflow in kingMess.exe 65.20.2003.10300 in WellinTech KingView 6.52, kingMess.exe 65.20.2003.10400 in KingView 6.53, and kingMess.e (no CVSS)
- [CVE-2012-4712](https://cve.now/CVE-2012-4712.md): Moxa EDR-G903 series routers with firmware before 2.11 have a hardcoded account, which allows remote attackers to obtain unspecified device (no CVSS)
- [CVE-2013-0658](https://cve.now/CVE-2013-0658.md): Heap-based buffer overflow in RFManagerService.exe in Schneider Electric Accutech Manager 2.00.1 and earlier allows remote attackers to exec (no CVSS)
- [CVE-2013-0703](https://cve.now/CVE-2013-0703.md): Cross-site scripting (XSS) vulnerability in imgboard.com imgboard before 1.22R6.1 u and 20xx before 2010u allows remote attackers to inject (no CVSS)
- [CVE-2013-0704](https://cve.now/CVE-2013-0704.md): Directory traversal vulnerability in the GREE application before 1.3.3 for Android allows remote attackers to obtain sensitive information v (no CVSS)
- [CVE-2013-0705](https://cve.now/CVE-2013-0705.md): Directory traversal vulnerability in LSI 3ware Disk Manager (3DM) before 2 allows remote attackers to read arbitrary files via unspecified v (no CVSS)
- [CVE-2013-1123](https://cve.now/CVE-2013-1123.md): Multiple cross-site scripting (XSS) vulnerabilities in the server in Cisco Unified MeetingPlace 7.0 allow remote attackers to inject arbitra (no CVSS)
- [CVE-2013-1128](https://cve.now/CVE-2013-1128.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the server in Cisco Unified MeetingPlace before 7.1(2.2000) allow remote attac (no CVSS)
- [CVE-2013-1405](https://cve.now/CVE-2013-1405.md): VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.0 before Update 4b an (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-02-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.