# CVEs published 2012-07-31

12 CVEs were published on July 31, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-3442](https://cve.now/CVE-2012-3442.md): The (1) django.http.HttpResponseRedirect and (2) django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1 (no CVSS, django)
- [CVE-2012-3443](https://cve.now/CVE-2012-3443.md): The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during (no CVSS, django)
- [CVE-2012-3444](https://cve.now/CVE-2012-3444.md): The get\_image\_dimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk si (no CVSS, django)
- [CVE-2012-2626](https://cve.now/CVE-2012-2626.md): cgi-bin/admin.cgi in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 does not require token authenticati (no CVSS)
- [CVE-2012-2627](https://cve.now/CVE-2012-2627.md): d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote attackers to create or (no CVSS)
- [CVE-2012-2647](https://cve.now/CVE-2012-2647.md): Yahoo! Toolbar 1.0.0.5 and earlier for Chrome and Safari allows remote attackers to modify the configured search URL, and intercept search t (no CVSS)
- [CVE-2012-3016](https://cve.now/CVE-2012-3016.md): Siemens SIMATIC S7-400 PN CPU devices with firmware 6 before 6.0.3 allow remote attackers to cause a denial of service (defect-mode transiti (no CVSS)
- [CVE-2012-3017](https://cve.now/CVE-2012-3017.md): Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x allow remote attackers to cause a denial of service (defect-mode transition and serv (no CVSS)
- [CVE-2012-3018](https://cve.now/CVE-2012-3018.md): The lockout-recovery feature in the Security Configurator component in ICONICS GENESIS32 9.22 and earlier and BizViz 9.22 and earlier uses a (no CVSS)
- [CVE-2012-3426](https://cve.now/CVE-2012-3426.md): OpenStack Keystone before 2012.1.1, as used in OpenStack Folsom before Folsom-1 and OpenStack Essex, does not properly implement token expir (no CVSS, keystone)
- [CVE-2012-3848](https://cve.now/CVE-2012-3848.md): Multiple cross-site scripting (XSS) vulnerabilities in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 a (no CVSS)
- [CVE-2012-3951](https://cve.now/CVE-2012-3951.md): The MySQL component in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) 9.0.1.19899 and earlier has a default password of admin for the ( (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-07-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.