# CVEs published 2012-06-04

22 CVEs were published on June 4, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-0060](https://cve.now/CVE-2012-0060.md): RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly… (no CVSS)
- [CVE-2012-0061](https://cve.now/CVE-2012-0061.md): The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote… (no CVSS)
- [CVE-2012-0815](https://cve.now/CVE-2012-0815.md): The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service (crash) and… (no CVSS)
- [CVE-2012-0862](https://cve.now/CVE-2012-0862.md): builtins.c in Xinetd before 2.3.15 does not check the service type when the tcpmux-server service is enabled, which exposes all enabled… (no CVSS)
- [CVE-2012-0944](https://cve.now/CVE-2012-0944.md): Aptdaemon 0.43 and earlier in Ubuntu 11.04, 11.10, and 12.04 LTS does not authenticate packages when the transaction is not simulated… (no CVSS)
- [CVE-2012-1173](https://cve.now/CVE-2012-1173.md): Multiple integer overflows in tiff\_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in… (no CVSS)
- [CVE-2011-2082](https://cve.now/CVE-2011-2082.md): The vulnerable-passwords script in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not update the password-hash… (no CVSS)
- [CVE-2011-2083](https://cve.now/CVE-2011-2083.md): Multiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 allow remote… (no CVSS)
- [CVE-2011-2084](https://cve.now/CVE-2011-2084.md): Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to read (1) hashes of former… (no CVSS)
- [CVE-2011-2085](https://cve.now/CVE-2011-2085.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Best Practical Solutions RT before 3.8.12 and 4.x before 4.0.6 allow remote… (no CVSS)
- [CVE-2011-4458](https://cve.now/CVE-2011-4458.md): Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6, when the VERPPrefix and VERPDomain options are… (no CVSS)
- [CVE-2011-4459](https://cve.now/CVE-2011-4459.md): Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not properly disable groups, which allows remote authenticated… (no CVSS)
- [CVE-2011-4460](https://cve.now/CVE-2011-4460.md): SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated… (no CVSS)
- [CVE-2011-5092](https://cve.now/CVE-2011-5092.md): Best Practical Solutions RT 3.8.x before 3.8.12 and 4.x before 4.0.6 allows remote attackers to execute arbitrary code and gain privileges… (no CVSS)
- [CVE-2011-5093](https://cve.now/CVE-2011-5093.md): Best Practical Solutions RT 4.x before 4.0.6 does not properly implement the DisallowExecuteCode option, which allows remote authenticated… (no CVSS)
- [CVE-2012-1250](https://cve.now/CVE-2012-1250.md): Logitec LAN-W300N/R routers with firmware before 2.27 do not properly restrict login access, which allows remote attackers to obtain… (no CVSS)
- [CVE-2012-1251](https://cve.now/CVE-2012-1251.md): Opera before 9.63 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… (no CVSS)
- [CVE-2012-1254](https://cve.now/CVE-2012-1254.md): Cross-site scripting (XSS) vulnerability in Segue 2.2.10.2 and earlier allows remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2012-1255](https://cve.now/CVE-2012-1255.md): SQL injection vulnerability in Segue 2.2.10.2 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. (no CVSS)
- [CVE-2012-1252](https://cve.now/CVE-2012-1252.md): Cross-site scripting (XSS) vulnerability in RSSOwl before 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a feed… (no CVSS)
- [CVE-2012-1253](https://cve.now/CVE-2012-1253.md): Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.7, when Internet Explorer is used, allows remote attackers to… (no CVSS)
- [CVE-2012-2630](https://cve.now/CVE-2012-2630.md): The Puella Magi Madoka Magica iP application 1.05 and earlier for Android places cleartext Twitter credentials in a log file, which allows… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2012-06-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.