# CVEs published 2012-06-17

13 CVEs were published on June 17, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-0037](https://cve.now/CVE-2012-0037.md): Redland Raptor (aka libraptor) before 2.0.7, as used by OpenOffice 3.3 and 3.4 Beta, LibreOffice before 3.4.6 and 3.5.x before 3.5.1, and ot (no CVSS)
- [CVE-2012-2090](https://cve.now/CVE-2012-2090.md): Multiple format string vulnerabilities in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cau (no CVSS)
- [CVE-2012-2091](https://cve.now/CVE-2012-2091.md): Multiple buffer overflows in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial o (no CVSS)
- [CVE-2012-2417](https://cve.now/CVE-2012-2417.md): PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature s (no CVSS, pycrypto)
- [CVE-2012-2668](https://cve.now/CVE-2012-2668.md): libraries/libldap/tls\_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS backend, always uses the default cipher suite (no CVSS)
- [CVE-2012-2670](https://cve.now/CVE-2012-2670.md): manageuser.php in Collabtive before 0.7.6 allows remote authenticated users, and possibly unauthenticated attackers, to bypass intended acce (no CVSS)
- [CVE-2012-2671](https://cve.now/CVE-2012-2671.md): The Rack::Cache rubygem 0.3.0 through 1.1 caches Set-Cookie and other sensitive headers, which allows attackers to obtain sensitive cookie i (no CVSS, rack-cache)
- [CVE-2012-2672](https://cve.now/CVE-2012-2672.md): Oracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup, which allows local users to obtain context info (no CVSS)
- [CVE-2012-2691](https://cve.now/CVE-2012-2691.md): The mc\_issue\_note\_update function in the SOAP API in MantisBT before 1.2.11 does not properly check privileges, which allows remote attacker (no CVSS)
- [CVE-2012-2692](https://cve.now/CVE-2012-2692.md): MantisBT before 1.2.11 does not check the delete\_attachments\_threshold permission when form\_security\_validation is set to OFF, which allows (no CVSS)
- [CVE-2012-2693](https://cve.now/CVE-2012-2693.md): libvirt, possibly before 0.9.12, does not properly assign USB devices to virtual machines when multiple devices have the same vendor and pro (no CVSS)
- [CVE-2012-3577](https://cve.now/CVE-2012-3577.md): Unrestricted file upload vulnerability in doupload.php in the Nmedia Member Conversation plugin before 1.4 for WordPress allows remote attac (no CVSS)
- [CVE-2012-3578](https://cve.now/CVE-2012-3578.md): Unrestricted file upload vulnerability in html/Upload.php in the FCChat Widget plugin 2.2.13.1 and earlier for WordPress allows remote attac (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-06-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.