# CVEs published 2012-08-08

12 CVEs were published on August 8, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-2649](https://cve.now/CVE-2012-2649.md): The Sleipnir Mobile application 2.2.0 and earlier and Sleipnir Mobile Black Edition application 2.2.0 and earlier for Android allow remote a (no CVSS)
- [CVE-2012-4004](https://cve.now/CVE-2012-4004.md): Cross-site scripting (XSS) vulnerability in the Sleipnir Mobile application 2.2.0 and earlier and Sleipnir Mobile Black Edition application (no CVSS)
- [CVE-2010-5142](https://cve.now/CVE-2010-5142.md): chef-server-api/app/controllers/users.rb in the API in Chef before 0.9.0 does not require administrative privileges for the create, destroy, (no CVSS, chef)
- [CVE-2011-4922](https://cve.now/CVE-2011-4922.md): cipher.c in the Cipher API in libpurple in Pidgin before 2.7.10 retains encryption-key data in process memory, which might allow local users (no CVSS)
- [CVE-2011-5097](https://cve.now/CVE-2011-5097.md): chef-server-api/app/controllers/cookbooks.rb in Chef Server in Chef before 0.9.18, and 0.10.x before 0.10.2, does not require administrative (no CVSS)
- [CVE-2011-5098](https://cve.now/CVE-2011-5098.md): chef-server-api/app/controllers/clients.rb in Chef Server in Chef before 0.9.20, and 0.10.x before 0.10.6, does not require administrative p (no CVSS)
- [CVE-2012-0421](https://cve.now/CVE-2012-0421.md): The SUSE Audit Log Keeper daemon before 0.2.1-0.4.6.1 for SUSE Manager and Spacewalk uses world-readable permissions for /etc/auditlog-keepe (no CVSS)
- [CVE-2012-2191](https://cve.now/CVE-2012-2191.md): IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other produ (no CVSS)
- [CVE-2012-2203](https://cve.now/CVE-2012-2203.md): IBM Global Security Kit (aka GSKit) before 8.0.14.22, as used in IBM Rational Directory Server, IBM Tivoli Directory Server, and other produ (no CVSS)
- [CVE-2012-2960](https://cve.now/CVE-2012-2960.md): Cross-site scripting (XSS) vulnerability in the import functionality in HP ArcSight Connector appliance 6.2.0.6244.0 and ArcSight Logger app (no CVSS)
- [CVE-2012-3424](https://cve.now/CVE-2012-3424.md): The decode\_credentials method in actionpack/lib/action\_controller/metal/http\_authentication.rb in Ruby on Rails 3.x before 3.0.16, 3.1.x bef (no CVSS, actionpack)
- [CVE-2012-3440](https://cve.now/CVE-2012-3440.md): A certain Red Hat script for sudo 1.7.2 on Red Hat Enterprise Linux (RHEL) 5 allows local users to overwrite arbitrary files via a symlink a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-08-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.