# CVEs published 2012-06-29 26 CVEs were published on June 29, 2012: 0 critical, 0 high. Days are UTC. - [CVE-2012-2012](https://cve.now/CVE-2012-2012.md): HP System Management Homepage (SMH) before 7.1.1 does not have an off autocomplete attribute for unspecified form fields, which makes it eas (no CVSS) - [CVE-2012-2013](https://cve.now/CVE-2012-2013.md): Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows remote attackers to cause a denial of service, or possi (no CVSS) - [CVE-2012-2014](https://cve.now/CVE-2012-2014.md): HP System Management Homepage (SMH) before 7.1.1 does not properly validate input, which allows remote authenticated users to have an unspec (no CVSS) - [CVE-2012-2015](https://cve.now/CVE-2012-2015.md): Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows remote authenticated users to gain privileges and obtai (no CVSS) - [CVE-2012-2016](https://cve.now/CVE-2012-2016.md): Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows local users to obtain sensitive information via unknown (no CVSS) - [CVE-2010-5076](https://cve.now/CVE-2010-5076.md): QSslSocket in Qt before 4.7.0-rc1 recognizes a wildcard IP address in the subject's Common Name field of an X.509 certificate, which might a (no CVSS) - [CVE-2012-0813](https://cve.now/CVE-2012-0813.md): Wicd before 1.7.1 saves sensitive information in log files in /var/log/wicd, which allows context-dependent attackers to obtain passwords an (no CVSS) - [CVE-2012-1118](https://cve.now/CVE-2012-1118.md): The access\_has\_bug\_level function in core/access\_api.php in MantisBT before 1.2.9 does not properly restrict access when the private\_bug\_vie (no CVSS) - [CVE-2012-1119](https://cve.now/CVE-2012-1119.md): MantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier for remote attackers to copy bug reports w (no CVSS) - [CVE-2012-1120](https://cve.now/CVE-2012-1120.md): The SOAP API in MantisBT before 1.2.9 does not properly enforce the bugnote\_allow\_user\_edit\_delete and delete\_bug\_threshold permissions, whi (no CVSS) - [CVE-2012-1121](https://cve.now/CVE-2012-1121.md): MantisBT before 1.2.9 does not properly check permissions, which allows remote authenticated users with manager privileges to (1) modify or (no CVSS) - [CVE-2012-1122](https://cve.now/CVE-2012-1122.md): bug\_actiongroup.php in MantisBT before 1.2.9 does not properly check the report\_bug\_threshold permission of the receiving project when movin (no CVSS) - [CVE-2012-1123](https://cve.now/CVE-2012-1123.md): The mci\_check\_login function in api/soap/mc\_api.php in the SOAP API in MantisBT before 1.2.9 allows remote attackers to bypass authenticatio (no CVSS) - [CVE-2012-1164](https://cve.now/CVE-2012-1164.md): slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search (no CVSS) - [CVE-2012-2385](https://cve.now/CVE-2012-2385.md): The terminal dispatcher in mosh before 1.2.1 allows remote authenticated users to cause a denial of service (long loop and CPU consumption) (no CVSS) - [CVE-2012-2664](https://cve.now/CVE-2012-2664.md): The sosreport utility in the Red Hat sos package before 2.2-29 does not remove the root user password information from the Kickstart configu (no CVSS) - [CVE-2012-2690](https://cve.now/CVE-2012-2690.md): virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable pe (no CVSS) - [CVE-2012-2698](https://cve.now/CVE-2012-2698.md): Cross-site scripting (XSS) vulnerability in the outputPage function in includes/SkinTemplate.php in MediaWiki before 1.17.5, 1.18.x before 1 (no CVSS) - [CVE-2012-3232](https://cve.now/CVE-2012-3232.md): Cross-site scripting (XSS) vulnerability in search.php in web@all 2.0, as downloaded before May 30, 2012, allows remote attackers to inject (no CVSS) - [CVE-2012-3818](https://cve.now/CVE-2012-3818.md): The fpm exporter in Revelation 0.4.13-2 and earlier encrypts the version number but not the password when exporting a file, which might allo (no CVSS) - [CVE-2012-3053](https://cve.now/CVE-2012-3053.md): Buffer overflow in the Cisco WebEx Advanced Recording Format (ARF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before S (no CVSS) - [CVE-2012-3054](https://cve.now/CVE-2012-3054.md): Heap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before (no CVSS) - [CVE-2012-3055](https://cve.now/CVE-2012-3055.md): Stack-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC befor (no CVSS) - [CVE-2012-3056](https://cve.now/CVE-2012-3056.md): Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before SP25 EP11, (no CVSS) - [CVE-2012-3057](https://cve.now/CVE-2012-3057.md): Heap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 L through SP11 EP26, T27 LB through SP21 EP10, T27 LC before (no CVSS) - [CVE-2012-2098](https://cve.now/CVE-2012-2098.md): Algorithmic complexity vulnerability in the sorting algorithms in bzip2 compressing stream (BZip2CompressorOutputStream) in Apache Commons C (no CVSS, org.apache.commons:commons-compress) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2012-06-29 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.