# CVEs published 2012-08-06

63 CVEs were published on August 6, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-1344](https://cve.now/CVE-2012-1344.md): Cisco IOS 15.1 and 15.2, when a clientless SSL VPN is configured, allows remote authenticated users to cause a denial of service (device… (no CVSS)
- [CVE-2012-1346](https://cve.now/CVE-2012-1346.md): Cisco Emergency Responder 8.6 and 9.2 allows remote attackers to cause a denial of service (CPU consumption) by sending malformed UDP… (no CVSS)
- [CVE-2012-1348](https://cve.now/CVE-2012-1348.md): Cisco Wide Area Application Services (WAAS) appliances with software 4.4, 5.0, and 5.1 include a one-way hash of a password within output… (no CVSS)
- [CVE-2012-1350](https://cve.now/CVE-2012-1350.md): Cisco IOS 12.3 and 12.4 on Aironet access points allows remote attackers to cause a denial of service (radio-interface input-queue hang)… (no CVSS)
- [CVE-2012-1357](https://cve.now/CVE-2012-1357.md): The igmp\_snoop\_orib\_fill\_source\_update function in the IGMP process in NX-OS 5.0 and 5.1 on Cisco Nexus 5000 series switches allows remote… (no CVSS)
- [CVE-2012-1361](https://cve.now/CVE-2012-1361.md): Cisco IOS 15.1 and 15.2, when the Multicast Music-on-Hold (MMoH) feature of Cisco Unified Communications Manager (CUCM) is enabled, allows… (no CVSS)
- [CVE-2012-2665](https://cve.now/CVE-2012-2665.md): Multiple heap-based buffer overflows in the XML manifest encryption tag parsing functionality in OpenOffice.org and LibreOffice before… (no CVSS)
- [CVE-2012-3448](https://cve.now/CVE-2012-3448.md): Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors. (no CVSS)
- [CVE-2012-1338](https://cve.now/CVE-2012-1338.md): Cisco IOS 15.0 and 15.1 on Catalyst 3560 and 3750 series switches allows remote authenticated users to cause a denial of service (device… (no CVSS)
- [CVE-2012-1339](https://cve.now/CVE-2012-1339.md): The Fabric Interconnect component in Cisco Unified Computing System (UCS) 2.0 allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2012-1340](https://cve.now/CVE-2012-1340.md): The Fibre Channel over IP (FCIP) implementation in Cisco MDS NX-OS 4.2 and 5.2 on MDS 9000 series switches allows remote attackers to… (no CVSS)
- [CVE-2012-1342](https://cve.now/CVE-2012-1342.md): Cisco Carrier Routing System (CRS) 3.9, 4.0, and 4.1 allows remote attackers to bypass ACL entries via fragmented packets, aka Bug ID… (no CVSS)
- [CVE-2012-2469](https://cve.now/CVE-2012-2469.md): Cisco NX-OS 4.2, 5.0, 5.1, and 5.2 on Nexus 7000 series switches, when the High Availability (HA) policy is configured for Reset, allows… (no CVSS)
- [CVE-2012-2472](https://cve.now/CVE-2012-2472.md): Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 and 8.4, when SIP inspection is enabled, create many… (no CVSS)
- [CVE-2012-2474](https://cve.now/CVE-2012-2474.md): Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.4 allows remote authenticated… (no CVSS)
- [CVE-2012-2490](https://cve.now/CVE-2012-2490.md): Cisco IP Communicator 8.6 allows man-in-the-middle attackers to modify the Certificate Trust List via unspecified vectors, aka Bug ID… (no CVSS)
- [CVE-2012-2498](https://cve.now/CVE-2012-2498.md): Cisco AnyConnect Secure Mobility Client 3.0 through 3.0.08066 does not ensure that authentication makes use of a legitimate certificate… (no CVSS)
- [CVE-2012-2499](https://cve.now/CVE-2012-2499.md): The IPsec implementation in Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509… (no CVSS)
- [CVE-2012-2500](https://cve.now/CVE-2012-2500.md): Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate during WebLaunch… (no CVSS)
- [CVE-2010-5137](https://cve.now/CVE-2010-5137.md): wxBitcoin and bitcoind before 0.3.5 allow remote attackers to cause a denial of service (daemon crash) via a Bitcoin transaction… (no CVSS)
- [CVE-2010-5138](https://cve.now/CVE-2010-5138.md): wxBitcoin and bitcoind 0.3.x allow remote attackers to cause a denial of service (electricity consumption) via a Bitcoin transaction… (no CVSS)
- [CVE-2010-5139](https://cve.now/CVE-2010-5139.md): Integer overflow in wxBitcoin and bitcoind before 0.3.11 allows remote attackers to bypass intended economic restrictions and create many… (no CVSS)
- [CVE-2010-5140](https://cve.now/CVE-2010-5140.md): wxBitcoin and bitcoind before 0.3.13 do not properly handle bitcoins associated with Bitcoin transactions that have zero confirmations… (no CVSS)
- [CVE-2010-5141](https://cve.now/CVE-2010-5141.md): wxBitcoin and bitcoind before 0.3.5 do not properly handle script opcodes in Bitcoin transactions, which allows remote attackers to spend… (no CVSS)
- [CVE-2011-4447](https://cve.now/CVE-2011-4447.md): The "encrypt wallet" feature in wxBitcoin and bitcoind 0.4.x before 0.4.1, and 0.5.0rc, does not properly interact with the deletion… (no CVSS)
- [CVE-2012-1014](https://cve.now/CVE-2012-1014.md): The process\_as\_req function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.10.x before 1.10.3 does not initialize a… (no CVSS)
- [CVE-2012-1015](https://cve.now/CVE-2012-1015.md): The kdc\_handle\_protected\_negotiation function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x before 1.9.5… (no CVSS)
- [CVE-2012-1909](https://cve.now/CVE-2012-1909.md): The Bitcoin protocol, as used in bitcoind before 0.4.4, wxBitcoin, Bitcoin-Qt, and other programs, does not properly handle multiple… (no CVSS)
- [CVE-2012-1910](https://cve.now/CVE-2012-1910.md): Bitcoin-Qt 0.5.0.x before 0.5.0.5; 0.5.1.x, 0.5.2.x, and 0.5.3.x before 0.5.3.1; and 0.6.x before 0.6.0rc4 on Windows does not use MinGW… (no CVSS)
- [CVE-2012-2188](https://cve.now/CVE-2012-2188.md): IBM Power Hardware Management Console (HMC) 7R3.5.0 before SP4, 7R7.1.0 and 7R7.2.0 before 7R7.2.0 SP3, and 7R7.3.0 before SP2, and… (no CVSS)
- [CVE-2012-2459](https://cve.now/CVE-2012-2459.md): Unspecified vulnerability in bitcoind and Bitcoin-Qt before 0.4.6, 0.5.x before 0.5.5, 0.6.0.x before 0.6.0.7, and 0.6.x before 0.6.2… (no CVSS)
- [CVE-2012-3020](https://cve.now/CVE-2012-3020.md): The Siemens Synco OZW Web Server devices OZW672.\*, OZW772.\*, and OZW775 with firmware before 4 have an unspecified default password, which… (no CVSS)
- [CVE-2012-3408](https://cve.now/CVE-2012-3408.md): lib/puppet/network/authstore.rb in Puppet before 2.7.18, and Puppet Enterprise before 2.5.2, supports use of IP addresses in certnames… (no CVSS, puppet)
- [CVE-2012-3450](https://cve.now/CVE-2012-3450.md): pdo\_sql\_parser.re in the PDO extension in PHP before 5.3.14 and 5.4.x before 5.4.4 does not properly determine the end of the query string… (no CVSS)
- [CVE-2012-3789](https://cve.now/CVE-2012-3789.md): Unspecified vulnerability in bitcoind and Bitcoin-Qt before 0.4.7rc3, 0.5.x before 0.5.6rc3, 0.6.0.x before 0.6.0.9rc1, and 0.6.x before… (no CVSS)
- [CVE-2012-3864](https://cve.now/CVE-2012-3864.md): Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, allows remote authenticated users to read arbitrary… (no CVSS)
- [CVE-2012-3865](https://cve.now/CVE-2012-3865.md): Directory traversal vulnerability in lib/puppet/reports/store.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise… (no CVSS, puppet)
- [CVE-2012-3866](https://cve.now/CVE-2012-3866.md): lib/puppet/defaults.rb in Puppet 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, uses 0644 permissions for last\_run\_report.yaml… (no CVSS, puppet)
- [CVE-2012-3867](https://cve.now/CVE-2012-3867.md): lib/puppet/ssl/certificate\_authority.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, does not… (no CVSS, puppet)
- [CVE-2012-4142](https://cve.now/CVE-2012-4142.md): Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, ignores some characters in HTML documents in… (no CVSS)
- [CVE-2012-4143](https://cve.now/CVE-2012-4143.md): Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, allows user-assisted remote attackers to trick… (no CVSS)
- [CVE-2012-4144](https://cve.now/CVE-2012-4144.md): Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, does not properly escape characters in DOM… (no CVSS)
- [CVE-2012-4145](https://cve.now/CVE-2012-4145.md): Unspecified vulnerability in Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, has unknown… (no CVSS)
- [CVE-2012-4146](https://cve.now/CVE-2012-4146.md): Opera before 12.01 allows remote attackers to cause a denial of service (application crash) via a crafted web site, as demonstrated by the… (no CVSS)
- [CVE-2012-1364](https://cve.now/CVE-2012-1364.md): Cisco Unified Computing System (UCS) 1.4 and 2.0 allows remote authenticated users to cause a denial of service (device reload) via a… (no CVSS)
- [CVE-2012-1365](https://cve.now/CVE-2012-1365.md): Cisco Unified Computing System (UCS) 1.4 and 2.0 allows remote authenticated users to cause a denial of service (device reload) via a… (no CVSS)
- [CVE-2012-1367](https://cve.now/CVE-2012-1367.md): The MallocLite implementation in Cisco IOS 12.0, 12.2, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (Route… (no CVSS)
- [CVE-2012-1370](https://cve.now/CVE-2012-1370.md): Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 allows remote authenticated users to cause a denial of service (vpnagentd… (no CVSS)
- [CVE-2012-2846](https://cve.now/CVE-2012-2846.md): Google Chrome before 21.0.1180.57 on Linux does not properly isolate renderer processes, which allows remote attackers to cause a denial… (no CVSS)
- [CVE-2012-2847](https://cve.now/CVE-2012-2847.md): Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, does not request user… (no CVSS)
- [CVE-2012-2848](https://cve.now/CVE-2012-2848.md): The drag-and-drop implementation in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome… (no CVSS)
- [CVE-2012-2849](https://cve.now/CVE-2012-2849.md): Off-by-one error in the GIF decoder in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and… (no CVSS)
- [CVE-2012-2850](https://cve.now/CVE-2012-2850.md): Multiple unspecified vulnerabilities in the PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before… (no CVSS)
- [CVE-2012-2851](https://cve.now/CVE-2012-2851.md): Multiple integer overflows in the PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on… (no CVSS)
- [CVE-2012-2852](https://cve.now/CVE-2012-2852.md): The PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame… (no CVSS)
- [CVE-2012-2853](https://cve.now/CVE-2012-2853.md): The webRequest API in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, does… (no CVSS)
- [CVE-2012-2854](https://cve.now/CVE-2012-2854.md): Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to… (no CVSS)
- [CVE-2012-2855](https://cve.now/CVE-2012-2855.md): Use-after-free vulnerability in the PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60… (no CVSS)
- [CVE-2012-2856](https://cve.now/CVE-2012-2856.md): The PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame… (no CVSS)
- [CVE-2012-2857](https://cve.now/CVE-2012-2857.md): Use-after-free vulnerability in the Cascading Style Sheets (CSS) DOM implementation in Google Chrome before 21.0.1180.57 on Mac OS X and… (no CVSS)
- [CVE-2012-2858](https://cve.now/CVE-2012-2858.md): Buffer overflow in the WebP decoder in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and… (no CVSS)
- [CVE-2012-2859](https://cve.now/CVE-2012-2859.md): Google Chrome before 21.0.1180.57 on Linux does not properly handle tabs, which allows remote attackers to execute arbitrary code or cause… (no CVSS)
- [CVE-2012-2860](https://cve.now/CVE-2012-2860.md): The date-picker implementation in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2012-08-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.