# CVEs published 2012-08-06

63 CVEs were published on August 6, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-1344](https://cve.now/CVE-2012-1344.md): Cisco IOS 15.1 and 15.2, when a clientless SSL VPN is configured, allows remote authenticated users to cause a denial of service (device rel (no CVSS)
- [CVE-2012-1346](https://cve.now/CVE-2012-1346.md): Cisco Emergency Responder 8.6 and 9.2 allows remote attackers to cause a denial of service (CPU consumption) by sending malformed UDP packet (no CVSS)
- [CVE-2012-1348](https://cve.now/CVE-2012-1348.md): Cisco Wide Area Application Services (WAAS) appliances with software 4.4, 5.0, and 5.1 include a one-way hash of a password within output te (no CVSS)
- [CVE-2012-1350](https://cve.now/CVE-2012-1350.md): Cisco IOS 12.3 and 12.4 on Aironet access points allows remote attackers to cause a denial of service (radio-interface input-queue hang) via (no CVSS)
- [CVE-2012-1357](https://cve.now/CVE-2012-1357.md): The igmp\_snoop\_orib\_fill\_source\_update function in the IGMP process in NX-OS 5.0 and 5.1 on Cisco Nexus 5000 series switches allows remote a (no CVSS)
- [CVE-2012-1361](https://cve.now/CVE-2012-1361.md): Cisco IOS 15.1 and 15.2, when the Multicast Music-on-Hold (MMoH) feature of Cisco Unified Communications Manager (CUCM) is enabled, allows r (no CVSS)
- [CVE-2012-2665](https://cve.now/CVE-2012-2665.md): Multiple heap-based buffer overflows in the XML manifest encryption tag parsing functionality in OpenOffice.org and LibreOffice before 3.5.5 (no CVSS)
- [CVE-2012-3448](https://cve.now/CVE-2012-3448.md): Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown attack vectors. (no CVSS)
- [CVE-2012-1338](https://cve.now/CVE-2012-1338.md): Cisco IOS 15.0 and 15.1 on Catalyst 3560 and 3750 series switches allows remote authenticated users to cause a denial of service (device rel (no CVSS)
- [CVE-2012-1339](https://cve.now/CVE-2012-1339.md): The Fabric Interconnect component in Cisco Unified Computing System (UCS) 2.0 allows remote attackers to cause a denial of service (process (no CVSS)
- [CVE-2012-1340](https://cve.now/CVE-2012-1340.md): The Fibre Channel over IP (FCIP) implementation in Cisco MDS NX-OS 4.2 and 5.2 on MDS 9000 series switches allows remote attackers to cause (no CVSS)
- [CVE-2012-1342](https://cve.now/CVE-2012-1342.md): Cisco Carrier Routing System (CRS) 3.9, 4.0, and 4.1 allows remote attackers to bypass ACL entries via fragmented packets, aka Bug ID CSCtj1 (no CVSS)
- [CVE-2012-2469](https://cve.now/CVE-2012-2469.md): Cisco NX-OS 4.2, 5.0, 5.1, and 5.2 on Nexus 7000 series switches, when the High Availability (HA) policy is configured for Reset, allows rem (no CVSS)
- [CVE-2012-2472](https://cve.now/CVE-2012-2472.md): Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 and 8.4, when SIP inspection is enabled, create many identica (no CVSS)
- [CVE-2012-2474](https://cve.now/CVE-2012-2474.md): Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.4 allows remote authenticated users (no CVSS)
- [CVE-2012-2490](https://cve.now/CVE-2012-2490.md): Cisco IP Communicator 8.6 allows man-in-the-middle attackers to modify the Certificate Trust List via unspecified vectors, aka Bug ID CSCtz0 (no CVSS)
- [CVE-2012-2498](https://cve.now/CVE-2012-2498.md): Cisco AnyConnect Secure Mobility Client 3.0 through 3.0.08066 does not ensure that authentication makes use of a legitimate certificate, whi (no CVSS)
- [CVE-2012-2499](https://cve.now/CVE-2012-2499.md): The IPsec implementation in Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 ce (no CVSS)
- [CVE-2012-2500](https://cve.now/CVE-2012-2500.md): Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate during WebLaunch o (no CVSS)
- [CVE-2010-5137](https://cve.now/CVE-2010-5137.md): wxBitcoin and bitcoind before 0.3.5 allow remote attackers to cause a denial of service (daemon crash) via a Bitcoin transaction containing (no CVSS)
- [CVE-2010-5138](https://cve.now/CVE-2010-5138.md): wxBitcoin and bitcoind 0.3.x allow remote attackers to cause a denial of service (electricity consumption) via a Bitcoin transaction contain (no CVSS)
- [CVE-2010-5139](https://cve.now/CVE-2010-5139.md): Integer overflow in wxBitcoin and bitcoind before 0.3.11 allows remote attackers to bypass intended economic restrictions and create many bi (no CVSS)
- [CVE-2010-5140](https://cve.now/CVE-2010-5140.md): wxBitcoin and bitcoind before 0.3.13 do not properly handle bitcoins associated with Bitcoin transactions that have zero confirmations, whic (no CVSS)
- [CVE-2010-5141](https://cve.now/CVE-2010-5141.md): wxBitcoin and bitcoind before 0.3.5 do not properly handle script opcodes in Bitcoin transactions, which allows remote attackers to spend bi (no CVSS)
- [CVE-2011-4447](https://cve.now/CVE-2011-4447.md): The "encrypt wallet" feature in wxBitcoin and bitcoind 0.4.x before 0.4.1, and 0.5.0rc, does not properly interact with the deletion functio (no CVSS)
- [CVE-2012-1014](https://cve.now/CVE-2012-1014.md): The process\_as\_req function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.10.x before 1.10.3 does not initialize a cer (no CVSS)
- [CVE-2012-1015](https://cve.now/CVE-2012-1015.md): The kdc\_handle\_protected\_negotiation function in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.8.x, 1.9.x before 1.9.5, a (no CVSS)
- [CVE-2012-1909](https://cve.now/CVE-2012-1909.md): The Bitcoin protocol, as used in bitcoind before 0.4.4, wxBitcoin, Bitcoin-Qt, and other programs, does not properly handle multiple transac (no CVSS)
- [CVE-2012-1910](https://cve.now/CVE-2012-1910.md): Bitcoin-Qt 0.5.0.x before 0.5.0.5; 0.5.1.x, 0.5.2.x, and 0.5.3.x before 0.5.3.1; and 0.6.x before 0.6.0rc4 on Windows does not use MinGW mul (no CVSS)
- [CVE-2012-2188](https://cve.now/CVE-2012-2188.md): IBM Power Hardware Management Console (HMC) 7R3.5.0 before SP4, 7R7.1.0 and 7R7.2.0 before 7R7.2.0 SP3, and 7R7.3.0 before SP2, and Systems (no CVSS)
- [CVE-2012-2459](https://cve.now/CVE-2012-2459.md): Unspecified vulnerability in bitcoind and Bitcoin-Qt before 0.4.6, 0.5.x before 0.5.5, 0.6.0.x before 0.6.0.7, and 0.6.x before 0.6.2 allows (no CVSS)
- [CVE-2012-3020](https://cve.now/CVE-2012-3020.md): The Siemens Synco OZW Web Server devices OZW672.\*, OZW772.\*, and OZW775 with firmware before 4 have an unspecified default password, which m (no CVSS)
- [CVE-2012-3408](https://cve.now/CVE-2012-3408.md): lib/puppet/network/authstore.rb in Puppet before 2.7.18, and Puppet Enterprise before 2.5.2, supports use of IP addresses in certnames witho (no CVSS, puppet)
- [CVE-2012-3450](https://cve.now/CVE-2012-3450.md): pdo\_sql\_parser.re in the PDO extension in PHP before 5.3.14 and 5.4.x before 5.4.4 does not properly determine the end of the query string d (no CVSS)
- [CVE-2012-3789](https://cve.now/CVE-2012-3789.md): Unspecified vulnerability in bitcoind and Bitcoin-Qt before 0.4.7rc3, 0.5.x before 0.5.6rc3, 0.6.0.x before 0.6.0.9rc1, and 0.6.x before 0.6 (no CVSS)
- [CVE-2012-3864](https://cve.now/CVE-2012-3864.md): Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, allows remote authenticated users to read arbitrary files (no CVSS)
- [CVE-2012-3865](https://cve.now/CVE-2012-3865.md): Directory traversal vulnerability in lib/puppet/reports/store.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise befo (no CVSS, puppet)
- [CVE-2012-3866](https://cve.now/CVE-2012-3866.md): lib/puppet/defaults.rb in Puppet 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, uses 0644 permissions for last\_run\_report.yaml, wh (no CVSS, puppet)
- [CVE-2012-3867](https://cve.now/CVE-2012-3867.md): lib/puppet/ssl/certificate\_authority.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, does not proper (no CVSS, puppet)
- [CVE-2012-4142](https://cve.now/CVE-2012-4142.md): Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, ignores some characters in HTML documents in uns (no CVSS)
- [CVE-2012-4143](https://cve.now/CVE-2012-4143.md): Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, allows user-assisted remote attackers to trick u (no CVSS)
- [CVE-2012-4144](https://cve.now/CVE-2012-4144.md): Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, does not properly escape characters in DOM eleme (no CVSS)
- [CVE-2012-4145](https://cve.now/CVE-2012-4145.md): Unspecified vulnerability in Opera before 12.01 on Windows and UNIX, and before 11.66 and 12.x before 12.01 on Mac OS X, has unknown impact (no CVSS)
- [CVE-2012-4146](https://cve.now/CVE-2012-4146.md): Opera before 12.01 allows remote attackers to cause a denial of service (application crash) via a crafted web site, as demonstrated by the L (no CVSS)
- [CVE-2012-1364](https://cve.now/CVE-2012-1364.md): Cisco Unified Computing System (UCS) 1.4 and 2.0 allows remote authenticated users to cause a denial of service (device reload) via a malfor (no CVSS)
- [CVE-2012-1365](https://cve.now/CVE-2012-1365.md): Cisco Unified Computing System (UCS) 1.4 and 2.0 allows remote authenticated users to cause a denial of service (device reload) via a malfor (no CVSS)
- [CVE-2012-1367](https://cve.now/CVE-2012-1367.md): The MallocLite implementation in Cisco IOS 12.0, 12.2, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service (Route Proc (no CVSS)
- [CVE-2012-1370](https://cve.now/CVE-2012-1370.md): Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 allows remote authenticated users to cause a denial of service (vpnagentd proce (no CVSS)
- [CVE-2012-2846](https://cve.now/CVE-2012-2846.md): Google Chrome before 21.0.1180.57 on Linux does not properly isolate renderer processes, which allows remote attackers to cause a denial of (no CVSS)
- [CVE-2012-2847](https://cve.now/CVE-2012-2847.md): Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, does not request user confirma (no CVSS)
- [CVE-2012-2848](https://cve.now/CVE-2012-2848.md): The drag-and-drop implementation in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome F (no CVSS)
- [CVE-2012-2849](https://cve.now/CVE-2012-2849.md): Off-by-one error in the GIF decoder in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrom (no CVSS)
- [CVE-2012-2850](https://cve.now/CVE-2012-2850.md): Multiple unspecified vulnerabilities in the PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.11 (no CVSS)
- [CVE-2012-2851](https://cve.now/CVE-2012-2851.md): Multiple integer overflows in the PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on W (no CVSS)
- [CVE-2012-2852](https://cve.now/CVE-2012-2852.md): The PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, does (no CVSS)
- [CVE-2012-2853](https://cve.now/CVE-2012-2853.md): The webRequest API in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, does not (no CVSS)
- [CVE-2012-2854](https://cve.now/CVE-2012-2854.md): Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to obt (no CVSS)
- [CVE-2012-2855](https://cve.now/CVE-2012-2855.md): Use-after-free vulnerability in the PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on (no CVSS)
- [CVE-2012-2856](https://cve.now/CVE-2012-2856.md): The PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allow (no CVSS)
- [CVE-2012-2857](https://cve.now/CVE-2012-2857.md): Use-after-free vulnerability in the Cascading Style Sheets (CSS) DOM implementation in Google Chrome before 21.0.1180.57 on Mac OS X and Lin (no CVSS)
- [CVE-2012-2858](https://cve.now/CVE-2012-2858.md): Buffer overflow in the WebP decoder in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrom (no CVSS)
- [CVE-2012-2859](https://cve.now/CVE-2012-2859.md): Google Chrome before 21.0.1180.57 on Linux does not properly handle tabs, which allows remote attackers to execute arbitrary code or cause a (no CVSS)
- [CVE-2012-2860](https://cve.now/CVE-2012-2860.md): The date-picker implementation in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Fra (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-08-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.