# CVEs published 2012-06-16 30 CVEs were published on June 16, 2012: 1 critical, 0 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2011-1473](https://cve.now/CVE-2011-1473.md): OpenSSL before 0.9.8l, and 0.9.8m through 1.x, does not properly restrict client-initiated renegotiation within the SSL and TLS protocols, w (no CVSS) - [CVE-2011-5094](https://cve.now/CVE-2011-5094.md): Mozilla Network Security Services (NSS) 3.x, with certain settings of the SSL\_ENABLE\_RENEGOTIATION option, does not properly restrict client (no CVSS) - [CVE-2012-1583](https://cve.now/CVE-2012-1583.md): Double free vulnerability in the xfrm6\_tunnel\_rcv function in net/ipv6/xfrm6\_tunnel.c in the Linux kernel before 2.6.22, when the xfrm6\_tunn (no CVSS) - [CVE-2012-1711](https://cve.now/CVE-2012-1711.md): Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, (no CVSS) - [CVE-2012-1713](https://cve.now/CVE-2012-1713.md): Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, (no CVSS) - [CVE-2012-1716](https://cve.now/CVE-2012-1716.md): Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, (no CVSS) - [CVE-2012-1717](https://cve.now/CVE-2012-1717.md): Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, (no CVSS) - [CVE-2012-1718](https://cve.now/CVE-2012-1718.md): Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, (no CVSS) - [CVE-2012-1719](https://cve.now/CVE-2012-1719.md): Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, (no CVSS) - [CVE-2012-1720](https://cve.now/CVE-2012-1720.md): Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, (no CVSS) - [CVE-2012-1721](https://cve.now/CVE-2012-1721.md): Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earl (no CVSS) - [CVE-2012-1722](https://cve.now/CVE-2012-1722.md): Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earl (no CVSS) - [CVE-2012-1723](https://cve.now/CVE-2012-1723.md): Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, (CVSS 9.8, KEV) - [CVE-2012-1724](https://cve.now/CVE-2012-1724.md): Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earl (no CVSS) - [CVE-2012-1725](https://cve.now/CVE-2012-1725.md): Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, (no CVSS) - [CVE-2012-1726](https://cve.now/CVE-2012-1726.md): Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier allows remote attackers t (no CVSS) - [CVE-2011-3193](https://cve.now/CVE-2011-3193.md): Heap-based buffer overflow in the Lookup\_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango (no CVSS) - [CVE-2011-3194](https://cve.now/CVE-2011-3194.md): Buffer overflow in the TIFF reader in gui/image/qtiffhandler.cpp in Qt 4.7.4 allows remote attackers to cause a denial of service (crash) an (no CVSS) - [CVE-2011-4328](https://cve.now/CVE-2011-4328.md): plugin/npapi/plugin.cpp in Gnash before 0.8.10 uses weak permissions (world readable) for cookie files with predictable names in /tmp, which (no CVSS) - [CVE-2011-4408](https://cve.now/CVE-2011-4408.md): The Single Sign On Client (ubuntu-sso-client) for Ubuntu 11.04 and 11.10 does not properly validate SSL certificates when using HTTPS, which (no CVSS) - [CVE-2011-4409](https://cve.now/CVE-2011-4409.md): The Ubuntu One Client for Ubuntu 10.04 LTS, 11.04, 11.10, and 12.04 LTS does not properly validate SSL certificates, which allows remote att (no CVSS) - [CVE-2012-0210](https://cve.now/CVE-2012-0210.md): debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to obtain system information and execute arb (no CVSS) - [CVE-2012-0211](https://cve.now/CVE-2012-0211.md): debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarb (no CVSS) - [CVE-2012-0212](https://cve.now/CVE-2012-0212.md): debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metachar (no CVSS) - [CVE-2012-1145](https://cve.now/CVE-2012-1145.md): spacewalk-backend in Red Hat Network Satellite 5.4 on Red Hat Enterprise Linux 6 does not properly authorize or authenticate uploads to the (no CVSS) - [CVE-2012-1502](https://cve.now/CVE-2012-1502.md): Double free vulnerability in the PyPAM\_conv in PAMmodule.c in PyPam 0.5.0 and earlier allows remote attackers to cause a denial of service ( (no CVSS) - [CVE-2012-2395](https://cve.now/CVE-2012-2395.md): Incomplete blacklist vulnerability in action\_power.py in Cobbler 2.2.0 allows remote attackers to execute arbitrary commands via shell metac (no CVSS, cobbler) - [CVE-2012-3574](https://cve.now/CVE-2012-3574.md): Unrestricted file upload vulnerability in includes/doajaxfileupload.php in the MM Forms Community plugin 2.2.5 and 2.2.6 for WordPress allow (no CVSS) - [CVE-2012-3575](https://cve.now/CVE-2012-3575.md): Unrestricted file upload vulnerability in uploader.php in the RBX Gallery plugin 2.1 for WordPress allows remote attackers to execute arbitr (no CVSS) - [CVE-2012-3576](https://cve.now/CVE-2012-3576.md): Unrestricted file upload vulnerability in php/upload.php in the wpStoreCart plugin before 2.5.30 for WordPress allows remote attackers to ex (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2012-06-16 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.