# CVEs published 2012-12-21

20 CVEs were published on December 21, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-5181](https://cve.now/CVE-2012-5181.md): Cross-site scripting (XSS) vulnerability in concrete5 Japanese 5.5.1 through 5.5.2.1 and concrete5 English 5.5.0 through 5.6.0.2 allows… (no CVSS, concrete5/concrete5)
- [CVE-2012-6324](https://cve.now/CVE-2012-6324.md): Directory traversal vulnerability in VMware vCenter Server Appliance (vCSA) 5.0 before Update 2 and 5.1 before Patch 1 allows remote… (no CVSS)
- [CVE-2012-6325](https://cve.now/CVE-2012-6325.md): VMware vCenter Server Appliance (vCSA) 5.0 before Update 2 does not properly parse XML documents, which allows remote authenticated users… (no CVSS)
- [CVE-2012-0957](https://cve.now/CVE-2012-0957.md): The override\_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from… (no CVSS)
- [CVE-2012-3002](https://cve.now/CVE-2012-3002.md): The web interface on (1) Foscam and (2) Wansview IP cameras allows remote attackers to bypass authentication, and perform administrative… (no CVSS)
- [CVE-2012-4444](https://cve.now/CVE-2012-4444.md): The ip6\_frag\_queue function in net/ipv6/reassembly.c in the Linux kernel before 2.6.36 allows remote attackers to bypass intended network… (no CVSS)
- [CVE-2012-4508](https://cve.now/CVE-2012-4508.md): Race condition in fs/ext4/extents.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from a deleted… (no CVSS)
- [CVE-2012-4565](https://cve.now/CVE-2012-4565.md): The tcp\_illinois\_info function in net/ipv4/tcp\_illinois.c in the Linux kernel before 3.4.19, when the net.ipv4.tcp\_congestion\_control… (no CVSS)
- [CVE-2012-4859](https://cve.now/CVE-2012-4859.md): Unspecified vulnerability in IBM Tivoli Storage Manager for Space Management (aka TSM HSM) before 6.2.5.0 and 6.3.x before 6.3.1.0 allows… (no CVSS)
- [CVE-2012-5517](https://cve.now/CVE-2012-5517.md): The online\_pages function in mm/memory\_hotplug.c in the Linux kernel before 3.6 allows local users to cause a denial of service (NULL… (no CVSS)
- [CVE-2012-5954](https://cve.now/CVE-2012-5954.md): Unspecified vulnerability in IBM Tivoli Storage Manager for Space Management (aka TSM HSM) before 6.2.5.0 and 6.3.x before 6.3.1.0 allows… (no CVSS)
- [CVE-2010-2387](https://cve.now/CVE-2010-2387.md): vicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x before 2.20.11, when GDM debug is enabled, logs the user password when… (no CVSS)
- [CVE-2011-2728](https://cve.now/CVE-2011-2728.md): The bsd\_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service… (no CVSS)
- [CVE-2012-0841](https://cve.now/CVE-2012-0841.md): libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows… (no CVSS)
- [CVE-2012-0882](https://cve.now/CVE-2012-0882.md): Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62… (no CVSS)
- [CVE-2012-1699](https://cve.now/CVE-2012-1699.md): The ProcSetEventMask function in difs/events.c in the xfs font server for X.Org X11R6 through X11R6.6 and XFree86 before 3.3.3 calls the… (no CVSS)
- [CVE-2012-1712](https://cve.now/CVE-2012-1712.md): Directory traversal vulnerability in the Liferay component in Oracle Sun GlassFish Web Space Server before 10.0 Update 7 Patch 2 has… (no CVSS)
- [CVE-2012-1714](https://cve.now/CVE-2012-1714.md): Unspecified vulnerability in a TList 6 ActiveX control in Oracle Hyperion Financial Management 11.1.1.4 and 11.1.2.1.104 allows remote… (no CVSS)
- [CVE-2012-3133](https://cve.now/CVE-2012-3133.md): Buffer overflow in the DataDirect ODBC driver, as used in Oracle Hyperion Interactive Reporting 11.1.2.1 and 11.1.2.2, Essbase Server… (no CVSS)
- [CVE-2012-3482](https://cve.now/CVE-2012-3482.md): Fetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM servers to (1) cause a denial of service… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2012-12-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.