# CVEs published 2012-09-28 27 CVEs were published on September 28, 2012: 0 critical, 0 high. Days are UTC. - [CVE-2012-1833](https://cve.now/CVE-2012-1833.md): VMware SpringSource Grails before 1.3.8, and 2.x before 2.0.2, does not properly restrict data binding, which might allow remote attackers… (no CVSS) - [CVE-2012-4448](https://cve.now/CVE-2012-4448.md): Cross-site request forgery (CSRF) vulnerability in wp-admin/index.php in WordPress 3.4.2 allows remote attackers to hijack the… (no CVSS) - [CVE-2012-2680](https://cve.now/CVE-2012-2680.md): Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, does not properly restrict access to… (no CVSS) - [CVE-2012-2681](https://cve.now/CVE-2012-2681.md): Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, uses predictable random numbers to generate… (no CVSS) - [CVE-2012-2683](https://cve.now/CVE-2012-2683.md): Multiple cross-site scripting (XSS) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid… (no CVSS) - [CVE-2012-2684](https://cve.now/CVE-2012-2684.md): Multiple SQL injection vulnerabilities in the get\_sample\_filters\_by\_signature function in Cumin before 0.1.5444, as used in Red Hat… (no CVSS) - [CVE-2012-2685](https://cve.now/CVE-2012-2685.md): Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticated users to cause a… (no CVSS) - [CVE-2012-2734](https://cve.now/CVE-2012-2734.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime… (no CVSS) - [CVE-2012-2735](https://cve.now/CVE-2012-2735.md): Session fixation vulnerability in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows… (no CVSS) - [CVE-2012-3459](https://cve.now/CVE-2012-3459.md): Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticated users to modify… (no CVSS) - [CVE-2012-3491](https://cve.now/CVE-2012-3491.md): src/condor\_schedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the permissions of jobs… (no CVSS) - [CVE-2012-3492](https://cve.now/CVE-2012-3492.md): The filesystem authentication (condor\_io/condor\_auth\_fs.cpp) in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 uses authentication… (no CVSS) - [CVE-2012-3493](https://cve.now/CVE-2012-3493.md): The command\_give\_request\_ad function in condor\_startd.V6/command.cpp Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 allows remote… (no CVSS) - [CVE-2012-5196](https://cve.now/CVE-2012-5196.md): Multiple buffer overflows in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors. (no CVSS) - [CVE-2012-5197](https://cve.now/CVE-2012-5197.md): Multiple unspecified vulnerabilities in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors related… (no CVSS) - [CVE-2012-0956](https://cve.now/CVE-2012-0956.md): ubiquity-slideshow-ubuntu before 58.2, during installation, allows remote man-in-the-middle attackers to execute arbitrary web script or… (no CVSS) - [CVE-2012-2145](https://cve.now/CVE-2012-2145.md): Apache Qpid 0.17 and earlier does not properly restrict incoming client connections, which allows remote attackers to cause a denial of… (no CVSS) - [CVE-2012-0417](https://cve.now/CVE-2012-0417.md): Integer overflow in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows… (no CVSS) - [CVE-2012-0418](https://cve.now/CVE-2012-0418.md): Unspecified vulnerability in the client in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 on Windows allows… (no CVSS) - [CVE-2012-0419](https://cve.now/CVE-2012-0419.md): Directory traversal vulnerability in the agent HTTP interfaces in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack… (no CVSS) - [CVE-2012-2998](https://cve.now/CVE-2012-2998.md): SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager (TMCM) before 5.5.0.1823 and 6.0 before 6.0.0.1449… (no CVSS) - [CVE-2012-4016](https://cve.now/CVE-2012-4016.md): The ATOK application before 1.0.4 for Android allows remote attackers to read the learning information file, and obtain sensitive… (no CVSS) - [CVE-2012-4017](https://cve.now/CVE-2012-4017.md): The jigbrowser+ application before 1.5.0 for Android does not properly implement the WebView class, which allows remote attackers to… (no CVSS) - [CVE-2012-4051](https://cve.now/CVE-2012-4051.md): Multiple cross-site request forgery (CSRF) vulnerabilities in editAccount.html in the JAMF Software Server (JSS) interface in JAMF Casper… (no CVSS) - [CVE-2012-4912](https://cve.now/CVE-2012-4912.md): Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support… (no CVSS) - [CVE-2012-5048](https://cve.now/CVE-2012-5048.md): APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and… (no CVSS) - [CVE-2012-5049](https://cve.now/CVE-2012-5049.md): APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service (infinite loop) via a… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2012-09-28 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.