# CVEs published 2012-08-20

37 CVEs were published on August 20, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-2986](https://cve.now/CVE-2012-2986.md): lhn/public/network/ping in HP SAN/iQ 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via (no CVSS)
- [CVE-2012-3252](https://cve.now/CVE-2012-3252.md): Unspecified vulnerability in HP Serviceguard A.11.19 and A.11.20 allows remote attackers to cause a denial of service via unknown vectors. (no CVSS)
- [CVE-2012-4361](https://cve.now/CVE-2012-4361.md): lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary comma (no CVSS)
- [CVE-2012-4362](https://cve.now/CVE-2012-4362.md): hydra.exe in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance has a hardcoded password of L0CAlu53R for the global$agent account, which (no CVSS)
- [CVE-2011-3945](https://cve.now/CVE-2011-3945.md): The decode\_frame function in the KVG1 decoder (kgv1dec.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav (no CVSS)
- [CVE-2011-4352](https://cve.now/CVE-2011-4352.md): Integer overflow in the vp3\_dequant function in the VP3 decoder (vp3.c) in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7. (no CVSS)
- [CVE-2011-4353](https://cve.now/CVE-2011-4353.md): The (1) av\_image\_fill\_pointers, (2) vp5\_parse\_coeff, and (3) vp6\_parse\_coeff functions in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7 (no CVSS)
- [CVE-2011-4364](https://cve.now/CVE-2011-4364.md): Buffer overflow in the Sierra VMD decoder in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before 0.7.9 and 0.8.x befor (no CVSS)
- [CVE-2011-4579](https://cve.now/CVE-2011-4579.md): The svq1\_decode\_frame function in the SVQ1 decoder (svq1dec.c) in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.x before (no CVSS)
- [CVE-2012-4052](https://cve.now/CVE-2012-4052.md): Multiple cross-site scripting (XSS) vulnerabilities in Jease before 2.9, when creating a comment, allow remote attackers to inject arbitrary (no CVSS)
- [CVE-2012-4237](https://cve.now/CVE-2012-4237.md): Multiple SQL injection vulnerabilities in TCExam before 11.3.008 allow remote authenticated users with level 5 or greater permissions to exe (no CVSS)
- [CVE-2012-4238](https://cve.now/CVE-2012-4238.md): Cross-site scripting (XSS) vulnerability in admin/code/tce\_edit\_answer.php in TCExam before 11.3.008 allows remote authenticated users with (no CVSS)
- [CVE-2012-0847](https://cve.now/CVE-2012-0847.md): Heap-based buffer overflow in the avfilter\_filter\_samples function in libavfilter/avfilter.c in FFmpeg before 0.9.1 allows remote attackers (no CVSS)
- [CVE-2012-0848](https://cve.now/CVE-2012-0848.md): Heap-based buffer overflow in the ws\_snd\_decode\_frame function in libavcodec/ws-snd1.c in FFmpeg 0.9.1 allows remote attackers to cause a de (no CVSS)
- [CVE-2012-0850](https://cve.now/CVE-2012-0850.md): The sbr\_qmf\_synthesis function in libavcodec/aacsbr.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of service (applicati (no CVSS)
- [CVE-2012-0854](https://cve.now/CVE-2012-0854.md): The dpcm\_decode\_frame function in libavcodec/dpcm.c in FFmpeg before 0.9.1 does not use the proper pointer after an audio API change, which (no CVSS)
- [CVE-2012-0856](https://cve.now/CVE-2012-0856.md): Heap-based buffer overflow in the MPV\_frame\_start function in libavcodec/mpegvideo.c in FFmpeg before 0.9.1, when the lowres option is enabl (no CVSS)
- [CVE-2012-0857](https://cve.now/CVE-2012-0857.md): Multiple buffer overflows in the get\_qcx function in the J2K decoder (j2kdec.c) in libavcode in FFmpeg before 0.9.1 allow remote attackers t (no CVSS)
- [CVE-2012-3455](https://cve.now/CVE-2012-3455.md): Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in KOffice 2.3 (no CVSS)
- [CVE-2012-3461](https://cve.now/CVE-2012-3461.md): The (1) otrl\_base64\_otr\_decode function in src/b64.c; (2) otrl\_proto\_data\_read\_flags and (3) otrl\_proto\_accept\_data functions in src/proto.c (no CVSS)
- [CVE-2012-4236](https://cve.now/CVE-2012-4236.md): Cross-site scripting (XSS) vulnerability in the refresh\_page function in application/modules/\_main/views/\_top.php in Total Shop UK eCommerce (no CVSS)
- [CVE-2011-3929](https://cve.now/CVE-2011-3929.md): The avpriv\_dv\_produce\_packet function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0 (no CVSS)
- [CVE-2011-3936](https://cve.now/CVE-2011-3936.md): The dv\_extract\_audio function in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11 and in Libav 0.5.x before 0.5.9, 0.6.x bef (no CVSS)
- [CVE-2011-3940](https://cve.now/CVE-2011-3940.md): nsvdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x bef (no CVSS)
- [CVE-2011-3947](https://cve.now/CVE-2011-3947.md): Buffer overflow in mjpegbdec.c in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x b (no CVSS)
- [CVE-2011-3951](https://cve.now/CVE-2011-3951.md): The dpcm\_decode\_frame function in dpcm.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x befo (no CVSS)
- [CVE-2011-3952](https://cve.now/CVE-2011-3952.md): The decode\_init function in kmvc.c in libavcodec in FFmpeg before 0.10 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x before 0.7 (no CVSS)
- [CVE-2012-0851](https://cve.now/CVE-2012-0851.md): The ff\_h264\_decode\_seq\_parameter\_set function in h264\_ps.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x befor (no CVSS)
- [CVE-2012-0852](https://cve.now/CVE-2012-0852.md): The adpcm\_decode\_frame function in adpcm.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x before 0.6.6, 0.7.x b (no CVSS)
- [CVE-2012-0853](https://cve.now/CVE-2012-0853.md): The decodeTonalComponents function in the Actrac3 codec (atrac3.c) in libavcodec in FFmpeg 0.7.x before 0.7.12, and 0.8.x before 0.8.11; and (no CVSS)
- [CVE-2012-0858](https://cve.now/CVE-2012-0858.md): The Shorten codec (shorten.c) in libavcodec in FFmpeg 0.7.x before 0.7.12 and 0.8.x before 0.8.11, and in Libav 0.5.x before 0.5.9, 0.6.x be (no CVSS)
- [CVE-2012-0859](https://cve.now/CVE-2012-0859.md): The render\_line function in the vorbis codec (vorbis.c) in libavcodec in FFmpeg before 0.9.1 allows remote attackers to cause a denial of se (no CVSS)
- [CVE-2012-0947](https://cve.now/CVE-2012-0947.md): Heap-based buffer overflow in the vqa\_decode\_chunk function in the VQA codec (vqavideo.c) in libavcodec in Libav 0.5.x before 0.5.9, 0.6.x b (no CVSS)
- [CVE-2012-2132](https://cve.now/CVE-2012-2132.md): libsoup 2.32.2 and earlier does not validate certificates or clear the trust flag when the ssl-ca-file does not exist, which allows remote a (no CVSS)
- [CVE-2012-2387](https://cve.now/CVE-2012-2387.md): devotee 0.1 patch 2 uses a 32-bit seed for generating 48-bit random numbers, which makes it easier for remote attackers to obtain the secret (no CVSS)
- [CVE-2012-3447](https://cve.now/CVE-2012-3447.md): virt/disk/api.py in OpenStack Compute (Nova) 2012.1.x before 2012.1.2 and Folsom before Folsom-3 allows remote authenticated users to overwr (no CVSS, nova)
- [CVE-2012-3456](https://cve.now/CVE-2012-3456.md): Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-08-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.