# CVEs published 2012-08-10

7 CVEs were published on August 10, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-3132](https://cve.now/CVE-2012-3132.md): SQL injection vulnerability in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authentic (no CVSS)
- [CVE-2012-3463](https://cve.now/CVE-2012-3463.md): Cross-site scripting (XSS) vulnerability in actionpack/lib/action\_view/helpers/form\_tag\_helper.rb in Ruby on Rails 3.x before 3.0.17, 3.1.x (no CVSS, actionpack)
- [CVE-2012-3464](https://cve.now/CVE-2012-3464.md): Cross-site scripting (XSS) vulnerability in activesupport/lib/active\_support/core\_ext/string/output\_safety.rb in Ruby on Rails before 3.0.17 (no CVSS, activesupport)
- [CVE-2012-3465](https://cve.now/CVE-2012-3465.md): Cross-site scripting (XSS) vulnerability in actionpack/lib/action\_view/helpers/sanitize\_helper.rb in the strip\_tags helper in Ruby on Rails (no CVSS, actionpack)
- [CVE-2012-3554](https://cve.now/CVE-2012-3554.md): SQL injection vulnerability in the RSGallery2 (com\_rsgallery2) component before 2.3.0 for Joomla! 1.5.x, and before 3.2.0 for Joomla! 2.5.x, (no CVSS)
- [CVE-2012-4071](https://cve.now/CVE-2012-4071.md): Cross-site scripting (XSS) vulnerability in the comments module in the RSGallery2 (com\_rsgallery2) component before 2.3.0 for Joomla! 1.5.x, (no CVSS)
- [CVE-2012-4235](https://cve.now/CVE-2012-4235.md): The RSGallery2 (com\_rsgallery2) component before 3.2.0 for Joomla! 2.5.x does not place index.html files in image directories, which allows (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-08-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.