# CVEs published 2012-04-09

5 CVEs were published on April 9, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-2215](https://cve.now/CVE-2012-2215.md): Directory traversal vulnerability in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote atta (no CVSS)
- [CVE-2011-3175](https://cve.now/CVE-2011-3175.md): Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers (no CVSS)
- [CVE-2011-3176](https://cve.now/CVE-2011-3176.md): Stack-based buffer overflow in the Preboot Service in Novell ZENworks Configuration Management (ZCM) 11.1 and 11.1a allows remote attackers (no CVSS)
- [CVE-2011-4188](https://cve.now/CVE-2011-4188.md): Buffer overflow in the Create Attribute function in jclient in Novell iManager 2.7.4 before patch 4 allows remote authenticated users to cau (no CVSS)
- [CVE-2012-0742](https://cve.now/CVE-2012-0742.md): IBM Tivoli Event Pump 4.2.2, when the LOG\_REQUESTS and VALIDATE\_SOAP\_USERS options are enabled, places credentials into the AOPSCLOG (aka AO (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-04-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.