# CVEs published 2012-07-09

10 CVEs were published on July 9, 2012: 0 critical, 1 high. Days are UTC.

- [CVE-2012-1493](https://cve.now/CVE-2012-1493.md): F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, and Enterprise Manage (no CVSS)
- [CVE-2012-2138](https://cve.now/CVE-2012-2138.md): The @CopyFrom operation in the POST servlet in the org.apache.sling.servlets.post bundle before 2.1.2 in Apache Sling does not prevent attem (no CVSS, org.apache.sling:org.apache.sling.servlets.post)
- [CVE-2012-2970](https://cve.now/CVE-2012-2970.md): The Synel SY-780/A Time & Attendance terminal allows remote attackers to cause a denial of service (device hang) via network traffic to port (no CVSS)
- [CVE-2012-3238](https://cve.now/CVE-2012-3238.md): Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote a (no CVSS)
- [CVE-2012-3812](https://cve.now/CVE-2012-3812.md): Double free vulnerability in apps/app\_voicemail.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Certified Asterisk 1 (no CVSS)
- [CVE-2012-2446](https://cve.now/CVE-2012-2446.md): Cross-site scripting (XSS) vulnerability in tools/local\_lookup.php in the WebAdmin Portal in Netsweeper allows remote attackers to inject ar (no CVSS)
- [CVE-2012-2447](https://cve.now/CVE-2012-2447.md): Cross-site request forgery (CSRF) vulnerability in accountmgr/adminupdate.php in the WebAdmin Portal in Netsweeper allows remote attackers t (no CVSS)
- [CVE-2012-3859](https://cve.now/CVE-2012-3859.md): Unspecified vulnerability in the WebAdmin Portal in Netsweeper has unknown impact and attack vectors, a different vulnerability than CVE-201 (no CVSS)
- [CVE-2012-3372](https://cve.now/CVE-2012-3372.md): The default configuration of Cyberoam UTM appliances uses the same Certification Authority certificate and same private key across different (CVSS 7.4)
- [CVE-2012-3863](https://cve.now/CVE-2012-3863.md): channels/chan\_sip.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Asterisk Business Edition C.3.x before C.3.7.5, Ce (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-07-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.