# CVEs published 2012-06-08

12 CVEs were published on June 8, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-1814](https://cve.now/CVE-2012-1814.md): Cross-site scripting (XSS) vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials (no CVSS)
- [CVE-2012-1815](https://cve.now/CVE-2012-1815.md): SQL injection vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Gr (no CVSS)
- [CVE-2012-1816](https://cve.now/CVE-2012-1816.md): PORTSERV.exe in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 all (no CVSS)
- [CVE-2012-1817](https://cve.now/CVE-2012-1817.md): Buffer overflow in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 (no CVSS)
- [CVE-2012-1818](https://cve.now/CVE-2012-1818.md): An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific (no CVSS)
- [CVE-2012-2595](https://cve.now/CVE-2012-2595.md): Multiple cross-site scripting (XSS) vulnerabilities in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2 allow remote at (no CVSS)
- [CVE-2012-2596](https://cve.now/CVE-2012-2596.md): The XPath functionality in unspecified web applications in Siemens WinCC 7.0 SP3 before Update 2 does not properly handle special characters (no CVSS)
- [CVE-2012-2597](https://cve.now/CVE-2012-2597.md): Multiple directory traversal vulnerabilities in Siemens WinCC 7.0 SP3 before Update 2 allow remote authenticated users to read arbitrary fil (no CVSS)
- [CVE-2012-2598](https://cve.now/CVE-2012-2598.md): Buffer overflow in the DiagAgent web server in Siemens WinCC 7.0 SP3 through Update 2 allows remote attackers to cause a denial of service ( (no CVSS)
- [CVE-2012-3003](https://cve.now/CVE-2012-3003.md): Open redirect vulnerability in an unspecified web application in Siemens WinCC 7.0 SP3 before Update 2 allows remote attackers to redirect u (no CVSS)
- [CVE-2012-1826](https://cve.now/CVE-2012-1826.md): dotCMS 1.9 before 1.9.5.1 allows remote authenticated users to execute arbitrary Java code via a crafted (1) XSLT or (2) Velocity template. (no CVSS, com.dotcms:dotcms)
- [CVE-2012-2603](https://cve.now/CVE-2012-2603.md): The server in CollabNet ScrumWorks Pro before 6.0 allows remote authenticated users to gain privileges and obtain sensitive information via (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-06-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.