Skip to content
OpenAdvisories

Archive

5 January 2013

Vulnerabilities first published on this day (UTC), newest first.

← December 2012 2013 / January /5 February 2013 →
  1. 16
  2. 214
  3. 316
  4. 422
  5. 54
  6. 6 
  7. 7 
  8. 81
  9. 915
  10. 1028
  11. 118
  12. 128
  13. 1329
  14. 141
  15. 1524
  16. 16 
  17. 1793
  18. 1811
  19. 194
  20. 20 
  21. 2110
  22. 2210
  23. 231
  24. 2444
  25. 253
  26. 265
  27. 2720
  28. 281
  29. 2918
  30. 301
  31. 3142
All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Unscored —
    CVE-2011-3937

    The H.263 codec (libavcodec/h263dec.c) in FFmpeg 0.7.x before 0.7.12, 0.8.x before 0.8.11, and unspecified versions bef…

  • Medium 6.5
    CVE-2012-4549

    Jboss enterprise application platform: org.jboss.as.ejb3: jboss enterprise application platform: access restriction bypass via improper ejb method authorization

    A flaw was found in JBoss Enterprise Application Platform. The `processInvocation` function within the `org.jboss.as.ejb3.security.AuthorizationInterceptor` component incorrectly authorizes all requests when no roles are defined for an Enterprise Java Beans (…

    Red Hat Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Red Hat JBoss Enterprise Application Platform 6.0
  • Medium 5.3
    CVE-2012-4550

    Jboss enterprise application platform: jboss eap: jbeap: jboss enterprise application platform: unauthorized ejb access via authorization module bypass

    A flaw was found in JBoss Enterprise Application Platform. When role-based authorization is used for Enterprise Java Beans (EJB) access, the system does not correctly call the necessary authorization modules. This prevents Java Authorization Contract for Cont…

    Red Hat Red Hat JBoss Enterprise Application Platform 6 for RHEL 5 Red Hat JBoss Enterprise Application Platform 6.0
  • Medium —
    CVE-2012-2378

    Improper Authentication in Apache CXF

    Apache CXF 2.4.5 through 2.4.7, 2.5.1 through 2.5.3, and 2.6.x before 2.6.1, does not properly enforce child policies of a WS-SecurityPolicy 1.1 SupportingToken policy on the client side, which allows remote attackers to bypass the (1) AlgorithmSuite, (2) Sig…

    org.apache.cxf:cxf Maven