# CVEs published 2013-02-27

14 CVEs were published on February 27, 2013: 0 critical, 2 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2012-4842](https://cve.now/CVE-2012-4842.md): Open redirect vulnerability in the web server in IBM Lotus Domino 8.5.x through 8.5.3 allows remote attackers to redirect users to arbitrary (no CVSS)
- [CVE-2012-4844](https://cve.now/CVE-2012-4844.md): Cross-site scripting (XSS) vulnerability in the web server in IBM Lotus Domino 8.5.x through 8.5.3 allows remote attackers to inject arbitra (no CVSS)
- [CVE-2013-0490](https://cve.now/CVE-2013-0490.md): Unspecified vulnerability in IBM InfoSphere Guardium S-TAP 8.1 for DB2 on z/OS allows local users to gain privileges via unknown vectors. (no CVSS)
- [CVE-2013-1133](https://cve.now/CVE-2013-1133.md): Cisco Unified Communications Manager (CUCM) 8.6 before 8.6(2a)su2, 8.6 BE3k before 8.6(4) BE3k, and 9.x before 9.0(1) allows remote attacker (no CVSS)
- [CVE-2013-1134](https://cve.now/CVE-2013-1134.md): The Location Bandwidth Manager (LBM) Intracluster-communication feature in Cisco Unified Communications Manager (CUCM) 9.x before 9.1(1) doe (no CVSS)
- [CVE-2013-1135](https://cve.now/CVE-2013-1135.md): Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.0 allows remote attackers to cause a denial of service (CPU (no CVSS)
- [CVE-2013-1137](https://cve.now/CVE-2013-1137.md): Cisco Unified Presence Server (CUPS) 8.6, 9.0, and 9.1 before 9.1.1 allows remote attackers to cause a denial of service (CPU consumption) v (no CVSS)
- [CVE-2012-5767](https://cve.now/CVE-2012-5767.md): Unspecified vulnerability in the web interface on the IBM TS3500 Tape Library with firmware before C260 allows remote authenticated users to (no CVSS)
- [CVE-2013-2276](https://cve.now/CVE-2013-2276.md): The avcodec\_decode\_audio4 function in utils.c in libavcodec in FFmpeg before 1.1.3 does not verify the decoding state before proceeding with (no CVSS)
- [CVE-2013-2277](https://cve.now/CVE-2013-2277.md): The ff\_h264\_decode\_seq\_parameter\_set function in h264\_ps.c in libavcodec in FFmpeg before 1.1.3 does not validate the relationship between l (no CVSS)
- [CVE-2013-0504](https://cve.now/CVE-2013-0504.md): Buffer overflow in the broker service in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and bef (no CVSS)
- [CVE-2013-0643](https://cve.now/CVE-2013-0643.md): The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 an (CVSS 8.8, KEV)
- [CVE-2013-0648](https://cve.now/CVE-2013-0648.md): Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6. (CVSS 8.8, KEV)
- [CVE-2013-1139](https://cve.now/CVE-2013-1139.md): The nsAPI interface in Cisco Cloud Portal 9.1 SP1 and SP2, and 9.3 through 9.3.2, does not properly check privileges, which allows remote au (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-02-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.