# CVEs published 2012-06-09

12 CVEs were published on June 9, 2012: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2012-2034](https://cve.now/CVE-2012-2034.md): Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 (CVSS 7.5, KEV)
- [CVE-2012-2035](https://cve.now/CVE-2012-2035.md): Stack-based buffer overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.2 (no CVSS)
- [CVE-2012-2036](https://cve.now/CVE-2012-2036.md): Integer overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x (no CVSS)
- [CVE-2012-2037](https://cve.now/CVE-2012-2037.md): Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 (no CVSS)
- [CVE-2012-2038](https://cve.now/CVE-2012-2038.md): Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 (no CVSS)
- [CVE-2012-2039](https://cve.now/CVE-2012-2039.md): Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 (no CVSS)
- [CVE-2012-2040](https://cve.now/CVE-2012-2040.md): Untrusted search path vulnerability in the installer in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Ma (no CVSS)
- [CVE-2012-2563](https://cve.now/CVE-2012-2563.md): Multiple cross-site scripting (XSS) vulnerabilities in Bloxx Web Filtering before 5.0.14 allow (1) remote attackers to inject arbitrary web (no CVSS)
- [CVE-2012-2564](https://cve.now/CVE-2012-2564.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Bloxx Web Filtering before 5.0.14 allow remote (no CVSS)
- [CVE-2012-2565](https://cve.now/CVE-2012-2565.md): Bloxx Web Filtering before 5.0.14 does not use a salt during calculation of a password hash, which makes it easier for context-dependent att (no CVSS)
- [CVE-2012-2566](https://cve.now/CVE-2012-2566.md): Bloxx Web Filtering before 5.0.14 does not properly interpret X-Forwarded-For headers during access-control and logging operations for HTTPS (no CVSS)
- [CVE-2012-3343](https://cve.now/CVE-2012-3343.md): Cross-site request forgery (CSRF) vulnerability in Microdasys before 3.5.1-B708, as used in Bloxx Web Filtering before 5.0.14 and other prod (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-06-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.