# CVEs published 2012-08-16

23 CVEs were published on August 16, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-2283](https://cve.now/CVE-2012-2283.md): The Iomega Home Media Network Hard Drive with EMC Lifeline firmware before 2.104, Home Media Network Hard Drive Cloud Edition with EMC Lifel (no CVSS)
- [CVE-2012-3009](https://cve.now/CVE-2012-3009.md): Siemens COMOS before 9.1 Patch 413, 9.2 before Update 03 Patch 023, and 10.0 before Patch 005 allows remote authenticated users to obtain da (no CVSS)
- [CVE-2012-3024](https://cve.now/CVE-2012-3024.md): Tridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys, which might allow remote attackers to byp (no CVSS)
- [CVE-2012-3025](https://cve.now/CVE-2012-3025.md): The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cook (no CVSS)
- [CVE-2012-3247](https://cve.now/CVE-2012-3247.md): Unspecified vulnerability on the HP Integrity Server BL860c i2, BL870c i2, and BL890c i2 with firmware before 26.31 and the HP Integrity Ser (no CVSS)
- [CVE-2012-3248](https://cve.now/CVE-2012-3248.md): HP Fortify Software Security Center 3.1, 3.3, 3.4, and 3.5 allows remote attackers to obtain sensitive information via unspecified vectors. (no CVSS)
- [CVE-2012-3249](https://cve.now/CVE-2012-3249.md): HP Fortify Software Security Center 3.1, 3.3, 3.4, and 3.5 allows remote authenticated users to obtain sensitive information via unspecified (no CVSS)
- [CVE-2012-3250](https://cve.now/CVE-2012-3250.md): Unspecified vulnerability in HP Service Manager Server 7.11, 9.21, and 9.30, and HP Service Center Server 6.28, allows remote attackers to c (no CVSS)
- [CVE-2012-3251](https://cve.now/CVE-2012-3251.md): Cross-site scripting (XSS) vulnerability in HP Service Manager Web Tier 7.11, 9.21, and 9.30, and HP Service Center Web Tier 6.28, allows re (no CVSS)
- [CVE-2012-4285](https://cve.now/CVE-2012-4285.md): The dissect\_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.1 (no CVSS)
- [CVE-2012-4286](https://cve.now/CVE-2012-4286.md): The pcapng\_read\_packet\_block function in wiretap/pcapng.c in the pcap-ng file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted re (no CVSS)
- [CVE-2012-4287](https://cve.now/CVE-2012-4287.md): epan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2012-4288](https://cve.now/CVE-2012-4288.md): Integer overflow in the dissect\_xtp\_ecntl function in epan/dissectors/packet-xtp.c in the XTP dissector in Wireshark 1.4.x before 1.4.15, 1. (no CVSS)
- [CVE-2012-4289](https://cve.now/CVE-2012-4289.md): epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remot (no CVSS)
- [CVE-2012-4290](https://cve.now/CVE-2012-4290.md): The CTDB dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial o (no CVSS)
- [CVE-2012-4291](https://cve.now/CVE-2012-4291.md): The CIP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of (no CVSS)
- [CVE-2012-4292](https://cve.now/CVE-2012-4292.md): The dissect\_stun\_message function in epan/dissectors/packet-stun.c in the STUN dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6. (no CVSS)
- [CVE-2012-4293](https://cve.now/CVE-2012-4293.md): plugins/ethercat/packet-ecatmb.c in the EtherCAT Mailbox dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1 (no CVSS)
- [CVE-2012-4294](https://cve.now/CVE-2012-4294.md): Buffer overflow in the channelised\_fill\_sdh\_g707\_format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x bef (no CVSS)
- [CVE-2012-4295](https://cve.now/CVE-2012-4295.md): Array index error in the channelised\_fill\_sdh\_g707\_format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x b (no CVSS)
- [CVE-2012-4296](https://cve.now/CVE-2012-4296.md): Buffer overflow in epan/dissectors/packet-rtps2.c in the RTPS2 dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x be (no CVSS)
- [CVE-2012-4297](https://cve.now/CVE-2012-4297.md): Buffer overflow in the dissect\_gsm\_rlcmac\_downlink function in epan/dissectors/packet-gsm\_rlcmac.c in the GSM RLC MAC dissector in Wireshark (no CVSS)
- [CVE-2012-4298](https://cve.now/CVE-2012-4298.md): Integer signedness error in the vwr\_read\_rec\_data\_ethernet function in wiretap/vwr.c in the Ixia IxVeriWave file parser in Wireshark 1.8.x b (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-08-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
