# CVEs published 2012-06-19

14 CVEs were published on June 19, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2009-0693](https://cve.now/CVE-2009-0693.md): Multiple buffer overflows in Wyse Device Manager (WDM) 4.7.x allow remote attackers to execute arbitrary code via (1) the User-Agent HTTP… (no CVSS)
- [CVE-2009-0695](https://cve.now/CVE-2009-0695.md): hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attackers to obtain… (no CVSS)
- [CVE-2012-0802](https://cve.now/CVE-2012-0802.md): Multiple buffer overflows in Spamdyke before 4.3.0 might allow remote attackers to execute arbitrary code via vectors related to "serious… (no CVSS)
- [CVE-2012-0950](https://cve.now/CVE-2012-0950.md): The Apport hook (DistUpgradeApport.py) in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uploads the /var/log/dist-upgrade… (no CVSS)
- [CVE-2012-0954](https://cve.now/CVE-2012-0954.md): APT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and… (no CVSS)
- [CVE-2012-2334](https://cve.now/CVE-2012-2334.md): Integer overflow in filter/source/msfilter/msdffimp.cxx in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice… (no CVSS)
- [CVE-2012-2753](https://cve.now/CVE-2012-2753.md): Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect (aka EPC) GUI in Check Point Endpoint Security R73.x and E80.x on… (no CVSS)
- [CVE-2012-3553](https://cve.now/CVE-2012-3553.md): chan\_skinny.c in the Skinny (aka SCCP) channel driver in Asterisk Open Source 10.x before 10.5.1 allows remote authenticated users to… (no CVSS)
- [CVE-2012-3587](https://cve.now/CVE-2012-3587.md): APT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and… (no CVSS)
- [CVE-2012-3588](https://cve.now/CVE-2012-3588.md): Directory traversal vulnerability in preview.php in the Plugin Newsletter plugin 1.5 for WordPress allows remote attackers to read… (no CVSS)
- [CVE-2012-3006](https://cve.now/CVE-2012-3006.md): The Innominate mGuard Smart HW before HW-101130 and BD before BD-101030, mGuard industrial RS, mGuard delta HW before HW-103060 and BD… (no CVSS)
- [CVE-2012-2636](https://cve.now/CVE-2012-2636.md): Cross-site scripting (XSS) vulnerability in KENT-WEB WEB PATIO 4.04 and earlier allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2012-2637](https://cve.now/CVE-2012-2637.md): Cross-site scripting (XSS) vulnerability in KENT-WEB WEB PATIO 4.04 and earlier might allow remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2012-2638](https://cve.now/CVE-2012-2638.md): Cross-site scripting (XSS) vulnerability in SmallPICT.cgi in SmallPICT before 2.7 allows remote attackers to inject arbitrary web script… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2012-06-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.