# CVEs published 2012-06-19

14 CVEs were published on June 19, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2009-0693](https://cve.now/CVE-2009-0693.md): Multiple buffer overflows in Wyse Device Manager (WDM) 4.7.x allow remote attackers to execute arbitrary code via (1) the User-Agent HTTP he (no CVSS)
- [CVE-2009-0695](https://cve.now/CVE-2009-0695.md): hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attackers to obtain manageme (no CVSS)
- [CVE-2012-0802](https://cve.now/CVE-2012-0802.md): Multiple buffer overflows in Spamdyke before 4.3.0 might allow remote attackers to execute arbitrary code via vectors related to "serious er (no CVSS)
- [CVE-2012-0950](https://cve.now/CVE-2012-0950.md): The Apport hook (DistUpgradeApport.py) in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uploads the /var/log/dist-upgrade d (no CVSS)
- [CVE-2012-0954](https://cve.now/CVE-2012-0954.md): APT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and do (no CVSS)
- [CVE-2012-2334](https://cve.now/CVE-2012-2334.md): Integer overflow in filter/source/msfilter/msdffimp.cxx in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before (no CVSS)
- [CVE-2012-2753](https://cve.now/CVE-2012-2753.md): Untrusted search path vulnerability in TrGUI.exe in the Endpoint Connect (aka EPC) GUI in Check Point Endpoint Security R73.x and E80.x on t (no CVSS)
- [CVE-2012-3553](https://cve.now/CVE-2012-3553.md): chan\_skinny.c in the Skinny (aka SCCP) channel driver in Asterisk Open Source 10.x before 10.5.1 allows remote authenticated users to cause (no CVSS)
- [CVE-2012-3587](https://cve.now/CVE-2012-3587.md): APT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and do (no CVSS)
- [CVE-2012-3588](https://cve.now/CVE-2012-3588.md): Directory traversal vulnerability in preview.php in the Plugin Newsletter plugin 1.5 for WordPress allows remote attackers to read arbitrary (no CVSS)
- [CVE-2012-3006](https://cve.now/CVE-2012-3006.md): The Innominate mGuard Smart HW before HW-101130 and BD before BD-101030, mGuard industrial RS, mGuard delta HW before HW-103060 and BD befor (no CVSS)
- [CVE-2012-2636](https://cve.now/CVE-2012-2636.md): Cross-site scripting (XSS) vulnerability in KENT-WEB WEB PATIO 4.04 and earlier allows remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2012-2637](https://cve.now/CVE-2012-2637.md): Cross-site scripting (XSS) vulnerability in KENT-WEB WEB PATIO 4.04 and earlier might allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2012-2638](https://cve.now/CVE-2012-2638.md): Cross-site scripting (XSS) vulnerability in SmallPICT.cgi in SmallPICT before 2.7 allows remote attackers to inject arbitrary web script or (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-06-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.