# CVEs published 2012-07-18 29 CVEs were published on July 18, 2012: 0 critical, 0 high. Days are UTC. - [CVE-2012-0866](https://cve.now/CVE-2012-0866.md): CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 does not properly check th (no CVSS) - [CVE-2012-0867](https://cve.now/CVE-2012-0867.md): PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 32 characters when verifying SS (no CVSS) - [CVE-2012-0868](https://cve.now/CVE-2012-0868.md): CRLF injection vulnerability in pg\_dump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 a (no CVSS) - [CVE-2012-2655](https://cve.now/CVE-2012-2655.md): PostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8, and 9.1.x before 9.1.4 allows remote authenticated users to cause a (no CVSS) - [CVE-2012-3358](https://cve.now/CVE-2012-3358.md): Multiple heap-based buffer overflows in the j2k\_read\_sot function in j2k.c in OpenJPEG 1.5 allow remote attackers to cause a denial of servi (no CVSS) - [CVE-2009-5030](https://cve.now/CVE-2009-5030.md): The tcd\_free\_encode function in tcd.c in OpenJPEG 1.3 through 1.5 allows remote attackers to cause a denial of service (memory corruption) a (no CVSS) - [CVE-2012-2139](https://cve.now/CVE-2012-2139.md): Directory traversal vulnerability in lib/mail/network/delivery\_methods/file\_delivery.rb in the Mail gem before 2.4.4 for Ruby allows remote (no CVSS, mail) - [CVE-2012-2140](https://cve.now/CVE-2012-2140.md): The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) sendmail or (2) e (no CVSS, mail) - [CVE-2012-2303](https://cve.now/CVE-2012-2303.md): The Spaces module 6.x-3.x before 6.x-3.4 for Drupal does not enforce permissions on non-object pages, which allows remote attackers to obtai (no CVSS) - [CVE-2012-4033](https://cve.now/CVE-2012-4033.md): Multiple unspecified vulnerabilities in the Zingiri Web Shop plugin before 2.4.0 for WordPress have unknown impact and attack vectors. (no CVSS) - [CVE-2012-1948](https://cve.now/CVE-2012-1948.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird (no CVSS) - [CVE-2012-1949](https://cve.now/CVE-2012-1949.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0, Thunderbird 5.0 through 13.0, and SeaMonkey (no CVSS) - [CVE-2012-1950](https://cve.now/CVE-2012-1950.md): The drag-and-drop implementation in Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 allows remote attackers to spoof the (no CVSS) - [CVE-2012-1951](https://cve.now/CVE-2012-1951.md): Use-after-free vulnerability in the nsSMILTimeValueSpec::IsEventBased function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before (no CVSS) - [CVE-2012-1952](https://cve.now/CVE-2012-1952.md): The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, T (no CVSS) - [CVE-2012-1953](https://cve.now/CVE-2012-1953.md): The ElementAnimations::EnsureStyleRuleFor function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 thro (no CVSS) - [CVE-2012-1954](https://cve.now/CVE-2012-1954.md): Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thun (no CVSS) - [CVE-2012-1955](https://cve.now/CVE-2012-1955.md): Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaM (no CVSS) - [CVE-2012-1957](https://cve.now/CVE-2012-1957.md): An unspecified parser-utility class in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thund (no CVSS) - [CVE-2012-1958](https://cve.now/CVE-2012-1958.md): Use-after-free vulnerability in the nsGlobalWindow::PageHidden function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, (no CVSS) - [CVE-2012-1959](https://cve.now/CVE-2012-1959.md): Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaM (no CVSS) - [CVE-2012-1960](https://cve.now/CVE-2012-1960.md): The qcms\_transform\_data\_rgb\_out\_lut\_sse2 function in the QCMS implementation in Mozilla Firefox 4.x through 13.0, Thunderbird 5.0 through 13 (no CVSS) - [CVE-2012-1961](https://cve.now/CVE-2012-1961.md): Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaM (no CVSS) - [CVE-2012-1962](https://cve.now/CVE-2012-1962.md): Use-after-free vulnerability in the JSDependentString::undepend function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6 (no CVSS) - [CVE-2012-1963](https://cve.now/CVE-2012-1963.md): The Content Security Policy (CSP) functionality in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through (no CVSS) - [CVE-2012-1964](https://cve.now/CVE-2012-1964.md): The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4.x through 12.0, Fire (no CVSS) - [CVE-2012-1965](https://cve.now/CVE-2012-1965.md): Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not properly establish the security context of a feed: URL, which all (no CVSS) - [CVE-2012-1966](https://cve.now/CVE-2012-1966.md): Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not have the same context-menu restrictions for data: URLs as for jav (no CVSS) - [CVE-2012-1967](https://cve.now/CVE-2012-1967.md): Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaM (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2012-07-18 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.