# CVEs published 2012-06-13

32 CVEs were published on June 13, 2012: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2011-2545](https://cve.now/CVE-2011-2545.md): Cross-site scripting (XSS) vulnerability in the SIP implementation on the Cisco SPA8000 and SPA8800 before 6.1.11, SPA2102 and SPA3102 befor (no CVSS)
- [CVE-2012-2011](https://cve.now/CVE-2012-2011.md): Multiple cross-site scripting (XSS) vulnerabilities in HP Web Jetadmin 8.x allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2012-1827](https://cve.now/CVE-2012-1827.md): The web service in AutoFORM PDM Archive before 7.1 does not have authorization requirements, which allows remote authenticated users to perf (no CVSS)
- [CVE-2012-1828](https://cve.now/CVE-2012-1828.md): The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows remote authenticated us (no CVSS)
- [CVE-2012-1829](https://cve.now/CVE-2012-1829.md): Multiple cross-site scripting (XSS) vulnerabilities in AutoFORM PDM Archive before 6.920 allow remote authenticated users to inject arbitrar (no CVSS)
- [CVE-2012-3287](https://cve.now/CVE-2012-3287.md): Poul-Henning Kamp md5crypt has insufficient algorithmic complexity and a consequently short runtime, which makes it easier for context-depen (no CVSS)
- [CVE-2012-3347](https://cve.now/CVE-2012-3347.md): AutoFORM PDM Archive before 7.0 implements user accounts in a way that allows for JMX Console authentication, which allows remote authentica (no CVSS)
- [CVE-2012-1820](https://cve.now/CVE-2012-1820.md): The bgp\_capability\_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service (assertion fail (no CVSS)
- [CVE-2012-2604](https://cve.now/CVE-2012-2604.md): Multiple cross-site scripting (XSS) vulnerabilities in GuestAccess.jsp in the Guest/Contractor access component in the administrative interf (no CVSS)
- [CVE-2012-2605](https://cve.now/CVE-2012-2605.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Bradford Network Sentry before 5.3.3 allow rem (no CVSS)
- [CVE-2012-2606](https://cve.now/CVE-2012-2606.md): The agent in Bradford Network Sentry before 5.3.3 does not require authentication for messages, which allows remote attackers to trigger the (no CVSS)
- [CVE-2011-1759](https://cve.now/CVE-2011-1759.md): Integer overflow in the sys\_oabi\_semtimedop function in arch/arm/kernel/sys\_oabi-compat.c in the Linux kernel before 2.6.39 on the ARM platf (no CVSS)
- [CVE-2011-1767](https://cve.now/CVE-2011-1767.md): net/ipv4/ip\_gre.c in the Linux kernel before 2.6.34, when ip\_gre is configured as a module, allows remote attackers to cause a denial of ser (no CVSS)
- [CVE-2011-1768](https://cve.now/CVE-2011-1768.md): The tunnels implementation in the Linux kernel before 2.6.34, when tunnel functionality is configured as a module, allows remote attackers t (no CVSS)
- [CVE-2011-1927](https://cve.now/CVE-2011-1927.md): The ip\_expire function in net/ipv4/ip\_fragment.c in the Linux kernel before 2.6.39 does not properly construct ICMP\_TIME\_EXCEEDED packets af (no CVSS)
- [CVE-2011-2182](https://cve.now/CVE-2011-2182.md): The ldm\_frag\_add function in fs/partitions/ldm.c in the Linux kernel before 2.6.39.1 does not properly handle memory allocation for non-init (no CVSS)
- [CVE-2011-2183](https://cve.now/CVE-2011-2183.md): Race condition in the scan\_get\_next\_rmap\_item function in mm/ksm.c in the Linux kernel before 2.6.39.3, when Kernel SamePage Merging (KSM) i (no CVSS)
- [CVE-2011-2208](https://cve.now/CVE-2011-2208.md): Integer signedness error in the osf\_getdomainname function in arch/alpha/kernel/osf\_sys.c in the Linux kernel before 2.6.39.4 on the Alpha p (no CVSS)
- [CVE-2011-2209](https://cve.now/CVE-2011-2209.md): Integer signedness error in the osf\_sysinfo function in arch/alpha/kernel/osf\_sys.c in the Linux kernel before 2.6.39.4 on the Alpha platfor (no CVSS)
- [CVE-2011-2210](https://cve.now/CVE-2011-2210.md): The osf\_getsysinfo function in arch/alpha/kernel/osf\_sys.c in the Linux kernel before 2.6.39.4 on the Alpha platform does not properly restr (no CVSS)
- [CVE-2011-2211](https://cve.now/CVE-2011-2211.md): The osf\_wait4 function in arch/alpha/kernel/osf\_sys.c in the Linux kernel before 2.6.39.4 on the Alpha platform uses an incorrect pointer, w (no CVSS)
- [CVE-2011-2493](https://cve.now/CVE-2011-2493.md): The ext4\_fill\_super function in fs/ext4/super.c in the Linux kernel before 2.6.39 does not properly initialize a certain error-report data s (no CVSS)
- [CVE-2011-2494](https://cve.now/CVE-2011-2494.md): kernel/taskstats.c in the Linux kernel before 3.1 allows local users to obtain sensitive I/O statistics by sending taskstats commands to a n (no CVSS)
- [CVE-2011-2495](https://cve.now/CVE-2011-2495.md): fs/proc/base.c in the Linux kernel before 2.6.39.4 does not properly restrict access to /proc/#####/io files, which allows local users to ob (no CVSS)
- [CVE-2011-2496](https://cve.now/CVE-2011-2496.md): Integer overflow in the vma\_to\_resize function in mm/mremap.c in the Linux kernel before 2.6.39 allows local users to cause a denial of serv (no CVSS)
- [CVE-2012-2313](https://cve.now/CVE-2012-2313.md): The rio\_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access to the SIOCSMIIREG com (no CVSS)
- [CVE-2012-2375](https://cve.now/CVE-2012-2375.md): The \_\_nfs4\_get\_acl\_uncached function in fs/nfs/nfs4proc.c in the NFSv4 implementation in the Linux kernel before 3.3.2 uses an incorrect len (no CVSS)
- [CVE-2012-2383](https://cve.now/CVE-2012-2383.md): Integer overflow in the i915\_gem\_execbuffer2 function in drivers/gpu/drm/i915/i915\_gem\_execbuffer.c in the Direct Rendering Manager (DRM) su (no CVSS)
- [CVE-2012-2384](https://cve.now/CVE-2012-2384.md): Integer overflow in the i915\_gem\_do\_execbuffer function in drivers/gpu/drm/i915/i915\_gem\_execbuffer.c in the Direct Rendering Manager (DRM) (no CVSS)
- [CVE-2012-2390](https://cve.now/CVE-2012-2390.md): Memory leak in mm/hugetlb.c in the Linux kernel before 3.4.2 allows local users to cause a denial of service (memory consumption or system c (no CVSS)
- [CVE-2012-1889](https://cve.now/CVE-2012-1889.md): Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitra (CVSS 8.8, KEV)
- [CVE-2012-2041](https://cve.now/CVE-2012-2041.md): CRLF injection vulnerability in the Component Browser in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary HTTP (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-06-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.