# CVEs published 2012-04-13

15 CVEs were published on April 13, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2010-4666](https://cve.now/CVE-2010-4666.md): Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of service (application crash) or possibly have (no CVSS)
- [CVE-2011-1777](https://cve.now/CVE-2011-1777.md): Multiple buffer overflows in the (1) heap\_add\_entry and (2) relocate\_dir functions in archive\_read\_support\_format\_iso9660.c in libarchive th (no CVSS)
- [CVE-2011-1778](https://cve.now/CVE-2011-1778.md): Buffer overflow in libarchive through 2.8.5 allows remote attackers to cause a denial of service (application crash) or possibly execute arb (no CVSS)
- [CVE-2011-1779](https://cve.now/CVE-2011-1779.md): Multiple use-after-free vulnerabilities in libarchive 2.8.4 and 2.8.5 allow remote attackers to cause a denial of service (application crash (no CVSS)
- [CVE-2012-0036](https://cve.now/CVE-2012-0036.md): curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a URL, which allows rem (no CVSS)
- [CVE-2012-1805](https://cve.now/CVE-2012-1805.md): Buffer overflow in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 (no CVSS)
- [CVE-2012-1806](https://cve.now/CVE-2012-1806.md): The ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 supports a maximum (no CVSS)
- [CVE-2012-1807](https://cve.now/CVE-2012-1807.md): Cross-site scripting (XSS) vulnerability in the web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-E (no CVSS)
- [CVE-2012-1808](https://cve.now/CVE-2012-1808.md): The web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 d (no CVSS)
- [CVE-2012-1809](https://cve.now/CVE-2012-1809.md): The web server in the ECOM Ethernet module in Koyo H0-ECOM, H0-ECOM100, H2-ECOM, H2-ECOM-F, H2-ECOM100, H4-ECOM, H4-ECOM-F, and H4-ECOM100 a (no CVSS)
- [CVE-2011-4874](https://cve.now/CVE-2011-4874.md): Use-after-free vulnerability in MICROSYS PROMOTIC before 8.1.7 allows user-assisted remote attackers to execute arbitrary code or cause a de (no CVSS)
- [CVE-2011-4880](https://cve.now/CVE-2011-4880.md): Directory traversal vulnerability in the web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 allows remote attackers to read arbi (no CVSS)
- [CVE-2011-4881](https://cve.now/CVE-2011-4881.md): The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 does not properly check return values from functions, which allows remote (no CVSS)
- [CVE-2011-4882](https://cve.now/CVE-2011-4882.md): The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 allows remote attackers to cause a denial of service (application exit) v (no CVSS)
- [CVE-2011-4883](https://cve.now/CVE-2011-4883.md): The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 does not properly validate values in HTTP requests, which allows remote a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-04-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.