# CVEs published 2012-05-18

12 CVEs were published on May 18, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-2093](https://cve.now/CVE-2012-2093.md): src/common/latex.py in Gajim 0.15 allows local users to overwrite arbitrary files via a symlink attack on a temporary latex file, related to (no CVSS)
- [CVE-2012-2118](https://cve.now/CVE-2012-2118.md): Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service o (no CVSS)
- [CVE-2012-2120](https://cve.now/CVE-2012-2120.md): latex2man in texlive-extra-utils 2011.20120322, and possibly other versions or packages, when used with the H or T option, allows local user (no CVSS)
- [CVE-2012-2320](https://cve.now/CVE-2012-2320.md): ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to bypass intended access (no CVSS)
- [CVE-2012-2321](https://cve.now/CVE-2012-2321.md): The loopback plug-in in ConnMan before 0.85 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) host n (no CVSS)
- [CVE-2012-2322](https://cve.now/CVE-2012-2322.md): Integer overflow in the dhcpv6\_get\_option function in gdhcp/client.c in ConnMan before 0.85 allows remote attackers to cause a denial of ser (no CVSS)
- [CVE-2012-2341](https://cve.now/CVE-2012-2341.md): Cross-site request forgery (CSRF) vulnerability in the Take Control module 6.x-2.x before 6.x-2.2 for Drupal allows remote attackers to hija (no CVSS)
- [CVE-2012-1589](https://cve.now/CVE-2012-1589.md): Open redirect vulnerability in the Form API in Drupal 7.x before 7.13 allows remote attackers to redirect users to arbitrary web sites and c (no CVSS, drupal/drupal)
- [CVE-2012-2010](https://cve.now/CVE-2012-2010.md): The ACMELOGIN implementation in HP OpenVMS 8.3 and 8.4 on the Alpha platform, and 8.3, 8.3-1H1, and 8.4 on the Itanium platform, when the SY (no CVSS)
- [CVE-2012-2337](https://cve.now/CVE-2012-2337.md): sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not properly support configurations that use a netmask syntax, which all (no CVSS)
- [CVE-2012-2406](https://cve.now/CVE-2012-2406.md): RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, does not properly parse ASMRuleBook data in RealMedia files, (no CVSS)
- [CVE-2012-2411](https://cve.now/CVE-2012-2411.md): Buffer overflow in RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitra (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-05-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.