# CVEs published 2012-06-04

22 CVEs were published on June 4, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-0060](https://cve.now/CVE-2012-0060.md): RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly e (no CVSS)
- [CVE-2012-0061](https://cve.now/CVE-2012-0061.md): The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote atta (no CVSS)
- [CVE-2012-0815](https://cve.now/CVE-2012-0815.md): The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service (crash) and possibl (no CVSS)
- [CVE-2012-0862](https://cve.now/CVE-2012-0862.md): builtins.c in Xinetd before 2.3.15 does not check the service type when the tcpmux-server service is enabled, which exposes all enabled serv (no CVSS)
- [CVE-2012-0944](https://cve.now/CVE-2012-0944.md): Aptdaemon 0.43 and earlier in Ubuntu 11.04, 11.10, and 12.04 LTS does not authenticate packages when the transaction is not simulated, which (no CVSS)
- [CVE-2012-1173](https://cve.now/CVE-2012-1173.md): Multiple integer overflows in tiff\_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a (no CVSS)
- [CVE-2011-2082](https://cve.now/CVE-2011-2082.md): The vulnerable-passwords script in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not update the password-hash algo (no CVSS)
- [CVE-2011-2083](https://cve.now/CVE-2011-2083.md): Multiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 allow remote attac (no CVSS)
- [CVE-2011-2084](https://cve.now/CVE-2011-2084.md): Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to read (1) hashes of former passwords (no CVSS)
- [CVE-2011-2085](https://cve.now/CVE-2011-2085.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Best Practical Solutions RT before 3.8.12 and 4.x before 4.0.6 allow remote at (no CVSS)
- [CVE-2011-4458](https://cve.now/CVE-2011-4458.md): Best Practical Solutions RT 3.6.x, 3.7.x, and 3.8.x before 3.8.12 and 4.x before 4.0.6, when the VERPPrefix and VERPDomain options are enabl (no CVSS)
- [CVE-2011-4459](https://cve.now/CVE-2011-4459.md): Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not properly disable groups, which allows remote authenticated users (no CVSS)
- [CVE-2011-4460](https://cve.now/CVE-2011-4460.md): SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users (no CVSS)
- [CVE-2011-5092](https://cve.now/CVE-2011-5092.md): Best Practical Solutions RT 3.8.x before 3.8.12 and 4.x before 4.0.6 allows remote attackers to execute arbitrary code and gain privileges v (no CVSS)
- [CVE-2011-5093](https://cve.now/CVE-2011-5093.md): Best Practical Solutions RT 4.x before 4.0.6 does not properly implement the DisallowExecuteCode option, which allows remote authenticated u (no CVSS)
- [CVE-2012-1250](https://cve.now/CVE-2012-1250.md): Logitec LAN-W300N/R routers with firmware before 2.27 do not properly restrict login access, which allows remote attackers to obtain adminis (no CVSS)
- [CVE-2012-1251](https://cve.now/CVE-2012-1251.md): Opera before 9.63 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers an (no CVSS)
- [CVE-2012-1254](https://cve.now/CVE-2012-1254.md): Cross-site scripting (XSS) vulnerability in Segue 2.2.10.2 and earlier allows remote attackers to inject arbitrary web script or HTML via un (no CVSS)
- [CVE-2012-1255](https://cve.now/CVE-2012-1255.md): SQL injection vulnerability in Segue 2.2.10.2 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. (no CVSS)
- [CVE-2012-1252](https://cve.now/CVE-2012-1252.md): Cross-site scripting (XSS) vulnerability in RSSOwl before 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a feed, a (no CVSS)
- [CVE-2012-1253](https://cve.now/CVE-2012-1253.md): Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 0.7, when Internet Explorer is used, allows remote attackers to inject (no CVSS)
- [CVE-2012-2630](https://cve.now/CVE-2012-2630.md): The Puella Magi Madoka Magica iP application 1.05 and earlier for Android places cleartext Twitter credentials in a log file, which allows r (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-06-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.