# CVEs published 2012-06-22

11 CVEs were published on June 22, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-2660](https://cve.now/CVE-2012-2660.md): actionpack/lib/action\_dispatch/http/request.rb in Ruby on Rails before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly (no CVSS, actionpack)
- [CVE-2012-2661](https://cve.now/CVE-2012-2661.md): The Active Record component in Ruby on Rails 3.0.x before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly implement the (no CVSS, activerecord)
- [CVE-2012-2694](https://cve.now/CVE-2012-2694.md): actionpack/lib/action\_dispatch/http/request.rb in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 does not properly (no CVSS, actionpack)
- [CVE-2012-2695](https://cve.now/CVE-2012-2695.md): The Active Record component in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 does not properly implement the passi (no CVSS, activerecord)
- [CVE-2012-0186](https://cve.now/CVE-2012-0186.md): Directory traversal vulnerability in the Eclipse Help component in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack allows r (no CVSS)
- [CVE-2012-0187](https://cve.now/CVE-2012-0187.md): Untrusted search path vulnerability in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack allows local users to gain privilege (no CVSS)
- [CVE-2012-0191](https://cve.now/CVE-2012-0191.md): The web container in IBM Lotus Expeditor 6.1.x and 6.2.x before 6.2 FP5+Security Pack does not properly perform access control for requests, (no CVSS)
- [CVE-2012-0304](https://cve.now/CVE-2012-0304.md): Symantec LiveUpdate Administrator before 2.3.1 uses weak permissions (Everyone: Full Control) for the installation directory, which allows l (no CVSS)
- [CVE-2012-2171](https://cve.now/CVE-2012-2171.md): SQL injection vulnerability in ModuleServlet.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager before 10.83.xx.18 (no CVSS)
- [CVE-2012-2172](https://cve.now/CVE-2012-2172.md): Cross-site scripting (XSS) vulnerability in SoftwareRegistration.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager (no CVSS)
- [CVE-2012-2179](https://cve.now/CVE-2012-2179.md): libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-06-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.