# CVEs published 2013-02-24

34 CVEs were published on February 24, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2012-5658](https://cve.now/CVE-2012-5658.md): rhc-chk.rb in Red Hat OpenShift Origin before 1.1, when -d (debug mode) is used, outputs the password and other sensitive information in cle (no CVSS)
- [CVE-2012-6072](https://cve.now/CVE-2012-6072.md): CRLF injection vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x (no CVSS, org.jenkins-ci.main:jenkins-core)
- [CVE-2012-6073](https://cve.now/CVE-2012-6073.md): Open redirect vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x b (no CVSS, org.jenkins-ci.main:jenkins-core)
- [CVE-2012-6074](https://cve.now/CVE-2012-6074.md): Cross-site scripting (XSS) vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6. (no CVSS, org.jenkins-ci.main:jenkins-core)
- [CVE-2013-0158](https://cve.now/CVE-2013-0158.md): Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x b (no CVSS, org.jenkins-ci.main:jenkins-core)
- [CVE-2013-0164](https://cve.now/CVE-2013-0164.md): The lockwrap function in port-proxy/bin/openshift-port-proxy-cfg in Red Hat OpenShift Origin before 1.1 allows local users to overwrite arbi (no CVSS)
- [CVE-2012-2697](https://cve.now/CVE-2012-2697.md): Unspecified vulnerability in autofs, as used in Red Hat Enterprise Linux (RHEL) 5, allows local users to cause a denial of service (autofs c (no CVSS)
- [CVE-2012-5646](https://cve.now/CVE-2012-5646.md): node-util/www/html/restorer.php in the Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to execute arbitrary commands via a c (no CVSS)
- [CVE-2012-5647](https://cve.now/CVE-2012-5647.md): Open redirect vulnerability in node-util/www/html/restorer.php in Red Hat OpenShift Origin before 1.0.5-3 allows remote attackers to redirec (no CVSS)
- [CVE-2012-6121](https://cve.now/CVE-2012-6121.md): Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.8.5 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2013-0212](https://cve.now/CVE-2013-0212.md): store/swift.py in OpenStack Glance Essex (2012.1), Folsom (2012.2) before 2012.2.3, and Grizzly, when in Swift single tenant mode, logs the (no CVSS, glance)
- [CVE-2012-5337](https://cve.now/CVE-2012-5337.md): Multiple cross-site scripting (XSS) vulnerabilities in jforum.page in JForum 2.1.9 allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2012-5624](https://cve.now/CVE-2012-5624.md): The XMLHttpRequest object in Qt before 4.8.4 enables http redirection to the file scheme, which allows man-in-the-middle attackers to force (no CVSS)
- [CVE-2012-6093](https://cve.now/CVE-2012-6093.md): The QSslSocket::sslErrors function in Qt before 4.6.5, 4.7.x before 4.7.6, 4.8.x before 4.8.5, when using certain versions of openSSL, uses (no CVSS)
- [CVE-2012-6128](https://cve.now/CVE-2012-6128.md): Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (applicati (no CVSS)
- [CVE-2013-0219](https://cve.now/CVE-2013-0219.md): System Security Services Daemon (SSSD) before 1.9.4, when (1) creating, (2) copying, or (3) removing a user home directory tree, allows loca (no CVSS)
- [CVE-2013-0220](https://cve.now/CVE-2013-0220.md): The (1) sss\_autofs\_cmd\_getautomntent and (2) sss\_autofs\_cmd\_getautomntbyname function in responder/autofs/autofssrv\_cmd.c and the (3) ssh\_cm (no CVSS)
- [CVE-2013-0247](https://cve.now/CVE-2013-0247.md): OpenStack Keystone Essex 2012.1.3 and earlier, Folsom 2012.2.3 and earlier, and Grizzly grizzly-2 and earlier allows remote attackers to cau (no CVSS)
- [CVE-2012-4704](https://cve.now/CVE-2012-4704.md): Array index error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted packet. (no CVSS)
- [CVE-2012-4705](https://cve.now/CVE-2012-4705.md): Directory traversal vulnerability in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors (no CVSS)
- [CVE-2012-4706](https://cve.now/CVE-2012-4706.md): Integer signedness error in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to cause a denial of service via a crafted pac (no CVSS)
- [CVE-2012-4707](https://cve.now/CVE-2012-4707.md): 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via vectors that trigger an out-of-bounds memory (no CVSS)
- [CVE-2012-4708](https://cve.now/CVE-2012-4708.md): Stack-based buffer overflow in 3S CODESYS Gateway-Server before 2.3.9.27 allows remote attackers to execute arbitrary code via a crafted pac (no CVSS)
- [CVE-2012-6273](https://cve.now/CVE-2012-6273.md): SQL injection vulnerability in BigAntSoft BigAnt IM Message Server allows remote attackers to execute arbitrary SQL commands via an SHU (aka (no CVSS)
- [CVE-2012-6274](https://cve.now/CVE-2012-6274.md): BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary fi (no CVSS)
- [CVE-2012-6275](https://cve.now/CVE-2012-6275.md): Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to have an unspecified impa (no CVSS)
- [CVE-2013-0108](https://cve.now/CVE-2013-0108.md): An ActiveX control in HscRemoteDeploy.dll in Honeywell Enterprise Buildings Integrator (EBI) R310, R400.2, R410.1, and R410.2; SymmetrE R310 (no CVSS)
- [CVE-2013-0113](https://cve.now/CVE-2013-0113.md): Nuance PDF Reader 7.0 and PDF Viewer Plus 7.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corrupti (no CVSS)
- [CVE-2013-0118](https://cve.now/CVE-2013-0118.md): CS-Cart before 3.0.6, when PayPal Standard Payments is configured, allows remote attackers to set the payment recipient via a modified value (no CVSS)
- [CVE-2013-0120](https://cve.now/CVE-2013-0120.md): The web interface on Dell PowerConnect 6248P switches allows remote attackers to cause a denial of service (device crash) via a malformed re (no CVSS)
- [CVE-2013-0785](https://cve.now/CVE-2013-0785.md): Cross-site scripting (XSS) vulnerability in show\_bug.cgi in Bugzilla before 3.6.13, 3.7.x and 4.0.x before 4.0.10, 4.1.x and 4.2.x before 4. (no CVSS)
- [CVE-2013-0786](https://cve.now/CVE-2013-0786.md): The Bugzilla::Search::build\_subselect function in Bugzilla 2.x and 3.x before 3.6.13 and 3.7.x and 4.0.x before 4.0.10 generates different e (no CVSS)
- [CVE-2012-0439](https://cve.now/CVE-2012-0439.md): An ActiveX control in gwcls1.dll in the client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to e (no CVSS)
- [CVE-2013-0804](https://cve.now/CVE-2013-0804.md): The client in Novell GroupWise 8.0 before 8.0.3 HP2 and 2012 before SP1 HP1 allows remote attackers to execute arbitrary code or cause a den (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-02-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.