# CVEs published 2012-08-30

17 CVEs were published on August 30, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-0547](https://cve.now/CVE-2012-0547.md): Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and… (no CVSS)
- [CVE-2012-1682](https://cve.now/CVE-2012-1682.md): Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers… (no CVSS)
- [CVE-2012-3136](https://cve.now/CVE-2012-3136.md): Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers… (no CVSS)
- [CVE-2011-1398](https://cve.now/CVE-2011-1398.md): The sapi\_header\_op function in main/SAPI.c in PHP before 5.3.11 and 5.4.x before 5.4.0RC2 does not check for %0D sequences (aka carriage… (no CVSS)
- [CVE-2011-5129](https://cve.now/CVE-2011-5129.md): Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute… (no CVSS)
- [CVE-2011-5130](https://cve.now/CVE-2011-5130.md): dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register\_globals is enabled, allows remote attackers to execute… (no CVSS)
- [CVE-2011-5131](https://cve.now/CVE-2011-5131.md): Cross-site request forgery (CSRF) vulnerability in global.php in MyBB before 1.6.5 allows remote attackers to hijack the authentication of… (no CVSS)
- [CVE-2011-5132](https://cve.now/CVE-2011-5132.md): Cross-site scripting (XSS) vulnerability in MyBB before 1.6.5 allows remote attackers to inject arbitrary web script or HTML via vectors… (no CVSS)
- [CVE-2011-5133](https://cve.now/CVE-2011-5133.md): Unspecified vulnerability in MyBB before 1.6.5 has unknown impact and attack vectors, related to an "unparsed user avatar in the buddy… (no CVSS)
- [CVE-2011-5134](https://cve.now/CVE-2011-5134.md): Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joomla! allows remote… (no CVSS)
- [CVE-2011-5135](https://cve.now/CVE-2011-5135.md): Multiple SQL injection vulnerabilities in the save\_connection function in lib/lib.iotask.php in the iotask module in DoceboLMS 4.0.4 and… (no CVSS)
- [CVE-2011-5136](https://cve.now/CVE-2011-5136.md): showImg.php in EPractize Labs Subscription Manager, possibly 1.0, allows remote attackers to overwrite arbitrary files via the db parameter. (no CVSS)
- [CVE-2012-3325](https://cve.now/CVE-2012-3325.md): IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.5, and 8.5.x Full Profile before… (no CVSS)
- [CVE-2012-3548](https://cve.now/CVE-2012-3548.md): The dissect\_drda function in epan/dissectors/packet-drda.c in Wireshark 1.6.x through 1.6.10 and 1.8.x through 1.8.2 allows remote… (no CVSS)
- [CVE-2012-3253](https://cve.now/CVE-2012-3253.md): Multiple unspecified vulnerabilities in HP Intelligent Management Center (IMC) before 5.0 E0101P05 allow remote attackers to execute… (no CVSS)
- [CVE-2012-3254](https://cve.now/CVE-2012-3254.md): Multiple unspecified vulnerabilities in HP iNode Management Center before iNode PC 5.1 E0304 allow remote attackers to execute arbitrary… (no CVSS)
- [CVE-2012-4010](https://cve.now/CVE-2012-4010.md): Opera before 11.60 allows remote attackers to spoof the address bar via unspecified homograph characters, a different vulnerability than… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2012-08-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.