# CVEs published 2012-03-20

12 CVEs were published on March 20, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-0709](https://cve.now/CVE-2012-0709.md): IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 does not properly check variables, which allows remote authenticated users to b (no CVSS)
- [CVE-2012-0710](https://cve.now/CVE-2012-0710.md): IBM DB2 9.1 before FP11, 9.5 before FP9, 9.7 before FP5, and 9.8 before FP4 allows remote attackers to cause a denial of service (daemon cra (no CVSS)
- [CVE-2012-0711](https://cve.now/CVE-2012-0711.md): Integer signedness error in the db2dasrrm process in the DB2 Administration Server (DAS) in IBM DB2 9.1 through FP11, 9.5 before FP9, and 9. (no CVSS)
- [CVE-2012-0712](https://cve.now/CVE-2012-0712.md): The XML feature in IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 allows remote authenticated users to cause a denial of servi (no CVSS)
- [CVE-2012-1796](https://cve.now/CVE-2012-1796.md): Unspecified vulnerability in IBM Tivoli Monitoring Agent (ITMA), as used in IBM DB2 9.5 before FP9 on UNIX, allows local users to gain privi (no CVSS)
- [CVE-2012-1797](https://cve.now/CVE-2012-1797.md): IBM DB2 9.5 uses world-writable permissions for nodes.reg, which has unspecified impact and attack vectors. (no CVSS)
- [CVE-2012-1795](https://cve.now/CVE-2012-1795.md): webglimpse.cgi in Webglimpse before 2.20.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the query param (no CVSS)
- [CVE-2012-0399](https://cve.now/CVE-2012-0399.md): Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA enVision 4.x before 4.1 Patch 4 allow remote attackers to inject arbitrary we (no CVSS)
- [CVE-2012-0400](https://cve.now/CVE-2012-0400.md): EMC RSA enVision 4.x before 4.1 Patch 4 does not properly restrict the number of failed authentication attempts, which makes it easier for r (no CVSS)
- [CVE-2012-0401](https://cve.now/CVE-2012-0401.md): Multiple SQL injection vulnerabilities in EMC RSA enVision 4.x before 4.1 Patch 4 allow remote authenticated users to execute arbitrary SQL (no CVSS)
- [CVE-2012-0402](https://cve.now/CVE-2012-0402.md): EMC RSA enVision 4.x before 4.1 Patch 4 uses unspecified hardcoded credentials, which makes it easier for remote attackers to obtain access (no CVSS)
- [CVE-2012-0403](https://cve.now/CVE-2012-0403.md): Directory traversal vulnerability in EMC RSA enVision 4.x before 4.1 Patch 4 allows remote authenticated users to have an unspecified impact (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-03-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.