# CVEs published 2012-03-13 26 CVEs were published on March 13, 2012: 0 critical, 1 high. Days are UTC. - [CVE-2012-0770](https://cve.now/CVE-2012-0770.md): Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 computes hash values for form parameters without restricting the ability to trigger hash collisi (no CVSS) - [CVE-2012-1663](https://cve.now/CVE-2012-1663.md): Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service (application crash) or p (no CVSS) - [CVE-2012-0002](https://cve.now/CVE-2012-0002.md): The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows… (no CVSS) - [CVE-2012-0006](https://cve.now/CVE-2012-0006.md): The DNS server in Microsoft Windows Server 2003 SP2 and Server 2008 SP2, R2, and R2 SP1 does not properly handle objects in memory during re (no CVSS) - [CVE-2012-0008](https://cve.now/CVE-2012-0008.md): Untrusted search path vulnerability in Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1 allows local users to gain privileges via a Troj (no CVSS) - [CVE-2012-0016](https://cve.now/CVE-2012-0016.md): Untrusted search path vulnerability in Microsoft Expression Design; Expression Design SP1; and Expression Design 2, 3, and 4 allows local us (no CVSS) - [CVE-2012-0152](https://cve.now/CVE-2012-0152.md): The Remote Desktop Protocol (RDP) service in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers (no CVSS) - [CVE-2012-0156](https://cve.now/CVE-2012-0156.md): DirectWrite in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly render Uni (no CVSS) - [CVE-2012-0157](https://cve.now/CVE-2012-0157.md): win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 S (CVSS 8.4) - [CVE-2012-0687](https://cve.now/CVE-2012-0687.md): TIBCO ActiveMatrix Runtime Platform in Service Grid and Service Bus 2.x before 2.3.2 and BusinessWorks Service Engine before 5.8.2; TIBCO Ac (no CVSS) - [CVE-2012-0688](https://cve.now/CVE-2012-0688.md): Cross-site scripting (XSS) vulnerability in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, (no CVSS) - [CVE-2012-0689](https://cve.now/CVE-2012-0689.md): The server in TIBCO ActiveMatrix Platform in TIBCO Silver Fabric ActiveMatrix Service Grid Distribution 3.1.3, Service Grid and Service Bus (no CVSS) - [CVE-2012-0690](https://cve.now/CVE-2012-0690.md): TIBCO Spotfire Web Application, Web Player Application, Automation Services Application, and Analytics Client Application in Spotfire Analyt (no CVSS) - [CVE-2012-1098](https://cve.now/CVE-2012-1098.md): Cross-site scripting (XSS) vulnerability in Ruby on Rails 3.0.x before 3.0.12, 3.1.x before 3.1.4, and 3.2.x before 3.2.2 allows remote atta (no CVSS, activesupport) - [CVE-2012-1099](https://cve.now/CVE-2012-1099.md): Cross-site scripting (XSS) vulnerability in actionpack/lib/action\_view/helpers/form\_options\_helper.rb in the select helper in Ruby on Rails (no CVSS, actionpack) - [CVE-2011-1394](https://cve.now/CVE-2011-1394.md): IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tiv (no CVSS) - [CVE-2011-1395](https://cve.now/CVE-2011-1395.md): Cross-site scripting (XSS) vulnerability in imicon.jsp in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allo (no CVSS) - [CVE-2011-1396](https://cve.now/CVE-2011-1396.md): Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows remote atta (no CVSS) - [CVE-2011-1397](https://cve.now/CVE-2011-1397.md): Cross-site request forgery (CSRF) vulnerability in the Labor Reporting page in IBM Maximo Asset Management and Asset Management Essentials 6 (no CVSS) - [CVE-2011-4816](https://cve.now/CVE-2011-4816.md): SQL injection vulnerability in the KPI component in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivol (no CVSS) - [CVE-2011-4817](https://cve.now/CVE-2011-4817.md): The About option on the Help menu in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Managem (no CVSS) - [CVE-2011-4818](https://cve.now/CVE-2011-4818.md): Open redirect vulnerability in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows remote authenticated use (no CVSS) - [CVE-2011-4819](https://cve.now/CVE-2011-4819.md): Multiple cross-site scripting (XSS) vulnerabilities in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allow r (no CVSS) - [CVE-2012-0195](https://cve.now/CVE-2012-0195.md): Cross-site scripting (XSS) vulnerability in the Start Center Layout and Configuration component in IBM Maximo Asset Management and Asset Man (no CVSS) - [CVE-2012-0884](https://cve.now/CVE-2012-0884.md): The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restri (no CVSS) - [CVE-2012-1472](https://cve.now/CVE-2012-1472.md): VMware vCenter Chargeback Manager (aka CBM) before 2.0.1 does not properly handle XML API requests, which allows remote attackers to read ar (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2012-03-13 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.