# CVEs published 2012-08-29

47 CVEs were published on August 29, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2011-2777](https://cve.now/CVE-2011-2777.md): samples/powerbtn/powerbtn.sh in acpid (aka acpid2) 2.0.16 and earlier uses the pidof program incorrectly, which allows local users to gain p (no CVSS)
- [CVE-2011-4578](https://cve.now/CVE-2011-4578.md): event.c in acpid (aka acpid2) before 2.0.11 does not have an appropriate umask setting during execution of event-handler scripts, which migh (no CVSS)
- [CVE-2012-2285](https://cve.now/CVE-2012-2285.md): EMC Cloud Tiering Appliance (aka CTA, formerly FMA) 9.0 and earlier, and Cloud Tiering Appliance Virtual Edition (CTA/VE) 9.0 and earlier, a (no CVSS)
- [CVE-2012-3295](https://cve.now/CVE-2012-3295.md): IBM WebSphere MQ 7.1, when an SVRCONN channel is used, allows remote attackers to bypass the security-configuration setup step and obtain qu (no CVSS)
- [CVE-2012-3309](https://cve.now/CVE-2012-3309.md): Cross-site request forgery (CSRF) vulnerability in the account-creation panel in IBM InfoSphere Guardium 8.2 and earlier, when the CSRF filt (no CVSS)
- [CVE-2012-3312](https://cve.now/CVE-2012-3312.md): The datasource definition editor in IBM InfoSphere Guardium 8.2 and earlier, when the save-password setting is enabled, transmits cleartext (no CVSS)
- [CVE-2012-4736](https://cve.now/CVE-2012-4736.md): The Device Encryption Client component in Sophos SafeGuard Enterprise 6.0, when a volume-based encryption policy is enabled in conjunction w (no CVSS)
- [CVE-2012-0307](https://cve.now/CVE-2012-0307.md): Multiple cross-site scripting (XSS) vulnerabilities in Symantec Messaging Gateway (SMG) before 10.0 allow remote attackers to inject arbitra (no CVSS)
- [CVE-2012-0308](https://cve.now/CVE-2012-0308.md): Cross-site request forgery (CSRF) vulnerability in Symantec Messaging Gateway (SMG) before 10.0 allows remote attackers to hijack the authen (no CVSS)
- [CVE-2012-1956](https://cve.now/CVE-2012-1956.md): Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 do not prevent use of the Object.defineProperty method to sh (no CVSS)
- [CVE-2012-1970](https://cve.now/CVE-2012-1970.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird befor (no CVSS)
- [CVE-2012-1971](https://cve.now/CVE-2012-1971.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.1 (no CVSS)
- [CVE-2012-1972](https://cve.now/CVE-2012-1972.md): Use-after-free vulnerability in the nsHTMLEditor::CollapseAdjacentTextNodes function in Mozilla Firefox before 15.0, Firefox ESR 10.x before (no CVSS)
- [CVE-2012-1973](https://cve.now/CVE-2012-1973.md): Use-after-free vulnerability in the nsObjectLoadingContent::LoadObject function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0 (no CVSS)
- [CVE-2012-1974](https://cve.now/CVE-2012-1974.md): Use-after-free vulnerability in the gfxTextRun::CanBreakLineBefore function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, (no CVSS)
- [CVE-2012-1975](https://cve.now/CVE-2012-1975.md): Use-after-free vulnerability in the PresShell::CompleteMove function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunder (no CVSS)
- [CVE-2012-1976](https://cve.now/CVE-2012-1976.md): Use-after-free vulnerability in the nsHTMLSelectElement::SubmitNamesValues function in Mozilla Firefox before 15.0, Firefox ESR 10.x before (no CVSS)
- [CVE-2012-3579](https://cve.now/CVE-2012-3579.md): Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers t (no CVSS)
- [CVE-2012-3580](https://cve.now/CVE-2012-3580.md): Symantec Messaging Gateway (SMG) before 10.0 allows remote authenticated users to modify the web application by leveraging access to the man (no CVSS)
- [CVE-2012-3581](https://cve.now/CVE-2012-3581.md): Symantec Messaging Gateway (SMG) before 10.0 allows remote attackers to obtain potentially sensitive information about component versions vi (no CVSS)
- [CVE-2012-3956](https://cve.now/CVE-2012-3956.md): Use-after-free vulnerability in the MediaStreamGraphThreadRunnable::Run function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10. (no CVSS)
- [CVE-2012-3957](https://cve.now/CVE-2012-3957.md): Heap-based buffer overflow in the nsBlockFrame::MarkLineDirty function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thund (no CVSS)
- [CVE-2012-3958](https://cve.now/CVE-2012-3958.md): Use-after-free vulnerability in the nsHTMLEditRules::DeleteNonTableElements function in Mozilla Firefox before 15.0, Firefox ESR 10.x before (no CVSS)
- [CVE-2012-3959](https://cve.now/CVE-2012-3959.md): Use-after-free vulnerability in the nsRangeUpdater::SelAdjDeleteNode function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7 (no CVSS)
- [CVE-2012-3960](https://cve.now/CVE-2012-3960.md): Use-after-free vulnerability in the mozSpellChecker::SetCurrentDictionary function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 1 (no CVSS)
- [CVE-2012-3961](https://cve.now/CVE-2012-3961.md): Use-after-free vulnerability in the RangeData implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird bef (no CVSS)
- [CVE-2012-3962](https://cve.now/CVE-2012-3962.md): Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey befo (no CVSS)
- [CVE-2012-3963](https://cve.now/CVE-2012-3963.md): Use-after-free vulnerability in the js::gc::MapAllocToTraceKind function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thu (no CVSS)
- [CVE-2012-3964](https://cve.now/CVE-2012-3964.md): Use-after-free vulnerability in the gfxTextRun::GetUserData function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunder (no CVSS)
- [CVE-2012-3965](https://cve.now/CVE-2012-3965.md): Mozilla Firefox before 15.0 does not properly restrict navigation to the about:newtab page, which allows remote attackers to execute arbitra (no CVSS)
- [CVE-2012-3966](https://cve.now/CVE-2012-3966.md): Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey befo (no CVSS)
- [CVE-2012-3967](https://cve.now/CVE-2012-3967.md): The WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x befor (no CVSS)
- [CVE-2012-3968](https://cve.now/CVE-2012-3968.md): Use-after-free vulnerability in the WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before (no CVSS)
- [CVE-2012-3969](https://cve.now/CVE-2012-3969.md): Integer overflow in the nsSVGFEMorphologyElement::Filter function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbir (no CVSS)
- [CVE-2012-3970](https://cve.now/CVE-2012-3970.md): Use-after-free vulnerability in the nsTArray\_base::Length function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbi (no CVSS)
- [CVE-2012-3971](https://cve.now/CVE-2012-3971.md): Summer Institute of Linguistics (SIL) Graphite 2, as used in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 (no CVSS)
- [CVE-2012-3972](https://cve.now/CVE-2012-3972.md): The format-number functionality in the XSLT implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird befor (no CVSS)
- [CVE-2012-3973](https://cve.now/CVE-2012-3973.md): The debugger in the developer-tools subsystem in Mozilla Firefox before 15.0, when remote debugging is disabled, does not properly restrict (no CVSS)
- [CVE-2012-3974](https://cve.now/CVE-2012-3974.md): Untrusted search path vulnerability in the installer in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0 (no CVSS)
- [CVE-2012-3975](https://cve.now/CVE-2012-3975.md): The DOMParser component in Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey before 2.12 loads subresources during parsing (no CVSS)
- [CVE-2012-3976](https://cve.now/CVE-2012-3976.md): Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly handle onLocationChange events during (no CVSS)
- [CVE-2012-3978](https://cve.now/CVE-2012-3978.md): The nsLocation::CheckURL function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 1 (no CVSS)
- [CVE-2012-3979](https://cve.now/CVE-2012-3979.md): Mozilla Firefox before 15.0 on Android does not properly implement unspecified callers of the \_\_android\_log\_print function, which allows rem (no CVSS)
- [CVE-2012-3980](https://cve.now/CVE-2012-3980.md): The web console in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10. (no CVSS)
- [CVE-2011-4918](https://cve.now/CVE-2011-4918.md): Multiple cross-site scripting (XSS) vulnerabilities in Elxis CMS 2009.2, 2009.3 and 2009.3 Aphrodite before revision 2684 allow remote attac (no CVSS)
- [CVE-2011-4926](https://cve.now/CVE-2011-4926.md): Cross-site scripting (XSS) vulnerability in adminimize/adminimize\_page.php in the Adminimize plugin before 1.7.22 for WordPress allows remot (no CVSS)
- [CVE-2011-5128](https://cve.now/CVE-2011-5128.md): Multiple cross-site scripting (XSS) vulnerabilities in the Adminimize plugin before 1.7.22 for WordPress allow remote attackers to inject ar (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-08-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.