# CVEs published 2012-04-17

11 CVEs were published on April 17, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-1180](https://cve.now/CVE-2012-1180.md): Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from (no CVSS)
- [CVE-2012-1518](https://cve.now/CVE-2012-1518.md): VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware (no CVSS)
- [CVE-2012-2089](https://cve.now/CVE-2012-2089.md): Buffer overflow in ngx\_http\_mp4\_module.c in the ngx\_http\_mp4\_module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the (no CVSS)
- [CVE-2011-2478](https://cve.now/CVE-2011-2478.md): Google SketchUp before 8 does not properly handle edge geometry in SketchUp (aka .SKP) files, which allows remote attackers to execute arbit (no CVSS)
- [CVE-2012-1979](https://cve.now/CVE-2012-1979.md): Cross-site scripting (XSS) vulnerability in starnet/index.php in SyndeoCMS 3.0.01 and earlier allows remote authenticated users to inject ar (no CVSS)
- [CVE-2012-0942](https://cve.now/CVE-2012-0942.md): Buffer overflow in rn5auth.dll in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to execute ar (no CVSS)
- [CVE-2012-1923](https://cve.now/CVE-2012-1923.md): RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x store passwords in cleartext under adm\_b\_db\\users\\, which allows local (no CVSS)
- [CVE-2012-1984](https://cve.now/CVE-2012-1984.md): Multiple cross-site scripting (XSS) vulnerabilities in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allow remote att (no CVSS)
- [CVE-2012-1985](https://cve.now/CVE-2012-1985.md): Cross-site request forgery (CSRF) vulnerability in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attack (no CVSS)
- [CVE-2012-2267](https://cve.now/CVE-2012-2267.md): master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause (no CVSS)
- [CVE-2012-2268](https://cve.now/CVE-2012-2268.md): master.exe in the SNMP Master Agent in RealNetworks Helix Server and Helix Mobile Server 14.x before 14.3.x allows remote attackers to cause (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-04-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.