# CVEs published 2012-07-28

2 CVEs were published on July 28, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-1968](https://cve.now/CVE-2012-1968.md): Bugzilla 4.1.x and 4.2.x before 4.2.2 and 4.3.x before 4.3.2 uses bug-editor privileges instead of bugmail-recipient privileges during const (no CVSS)
- [CVE-2012-1969](https://cve.now/CVE-2012-1969.md): The get\_attachment\_link function in Template.pm in Bugzilla 2.x and 3.x before 3.6.10, 3.7.x and 4.0.x before 4.0.7, 4.1.x and 4.2.x before (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-07-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.