# CVEs published 2012-08-27 19 CVEs were published on August 27, 2012: 0 critical, 0 high. Days are UTC. - [CVE-2011-4944](https://cve.now/CVE-2011-4944.md): Python 2.6 through 3.2 creates ~/.pypirc with world-readable permissions before changing them after data has been written, which introduces (no CVSS) - [CVE-2012-0849](https://cve.now/CVE-2012-0849.md): Integer overflow in the ff\_j2k\_dwt\_init function in libavcodec/j2k\_dwt.c in FFmpeg before 0.9.1 allows remote attackers to cause a denial of (no CVSS) - [CVE-2012-0855](https://cve.now/CVE-2012-0855.md): Heap-based buffer overflow in the get\_sot function in the J2K decoder (j2k.c) in libavcodec in FFmpeg before 0.9.1 allows remote attackers t (no CVSS) - [CVE-2012-1586](https://cve.now/CVE-2012-1586.md): mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the file path in the second (no CVSS) - [CVE-2012-3410](https://cve.now/CVE-2012-3410.md): Stack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local users to bypass intended restricted shell (no CVSS) - [CVE-2012-3418](https://cve.now/CVE-2012-3418.md): libpcp in Performance Co-Pilot (PCP) before 3.6.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code v (no CVSS) - [CVE-2012-3419](https://cve.now/CVE-2012-3419.md): Performance Co-Pilot (PCP) before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such a (no CVSS) - [CVE-2012-3420](https://cve.now/CVE-2012-3420.md): Multiple memory leaks in Performance Co-Pilot (PCP) before 3.6.5 allow remote attackers to cause a denial of service (memory consumption or (no CVSS) - [CVE-2012-3421](https://cve.now/CVE-2012-3421.md): The pduread function in pdu.c in libpcp in Performance Co-Pilot (PCP) before 3.6.5 does not properly time out connections, which allows remo (no CVSS) - [CVE-2012-3467](https://cve.now/CVE-2012-3467.md): Apache QPID 0.14, 0.16, and earlier uses a NullAuthenticator mechanism to authenticate catch-up shadow connections to AMQP brokers, which al (no CVSS, org.apache.qpid:qpid-parent) - [CVE-2012-4036](https://cve.now/CVE-2012-4036.md): Unrestricted file upload vulnerability in admin.php in PBBoard 2.1.4 allows remote administrators to execute arbitrary PHP code by uploading (no CVSS) - [CVE-2012-4680](https://cve.now/CVE-2012-4680.md): Directory traversal vulnerability in the XML Server in IOServer before 1.0.19.0, when the Root Directory pathname lacks a trailing \\ (backsl (no CVSS) - [CVE-2012-1933](https://cve.now/CVE-2012-1933.md): Multiple PHP remote file inclusion vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4 before RC4, when register\_globals is enabled, allow (no CVSS) - [CVE-2012-1934](https://cve.now/CVE-2012-1934.md): SQL injection vulnerability in admin/country/edit.php in Newscoop before 3.5.5 and 4.x before 4 RC4 allows remote attackers to execute arbit (no CVSS) - [CVE-2012-1935](https://cve.now/CVE-2012-1935.md): Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4.x before 4 RC4 allow remote attackers to inject arb (no CVSS) - [CVE-2012-2112](https://cve.now/CVE-2012-2112.md): Cross-site scripting (XSS) vulnerability in the Exception Handler in TYPO3 4.4.x before 4.4.15, 4.5.x before 4.5.15, 4.6.x before 4.6.8, and (no CVSS, typo3/cms) - [CVE-2012-2129](https://cve.now/CVE-2012-2129.md): Cross-site scripting (XSS) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to inject arbitrary web script or (no CVSS) - [CVE-2012-4679](https://cve.now/CVE-2012-4679.md): Cross-site scripting (XSS) vulnerability in admin/login.php in Newscoop before 3.5.5 allows remote attackers to inject arbitrary web script (no CVSS) - [CVE-2012-2128](https://cve.now/CVE-2012-2128.md): Cross-site request forgery (CSRF) vulnerability in doku.php in DokuWiki 2012-01-25 Angua allows remote attackers to hijack the authenticatio (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2012-08-27 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.