# CVEs published 2012-08-30

17 CVEs were published on August 30, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-0547](https://cve.now/CVE-2012-0547.md): Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earl (no CVSS)
- [CVE-2012-1682](https://cve.now/CVE-2012-1682.md): Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers t (no CVSS)
- [CVE-2012-3136](https://cve.now/CVE-2012-3136.md): Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allows remote attackers t (no CVSS)
- [CVE-2011-1398](https://cve.now/CVE-2011-1398.md): The sapi\_header\_op function in main/SAPI.c in PHP before 5.3.11 and 5.4.x before 5.4.0RC2 does not check for %0D sequences (aka carriage ret (no CVSS)
- [CVE-2011-5129](https://cve.now/CVE-2011-5129.md): Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbi (no CVSS)
- [CVE-2011-5130](https://cve.now/CVE-2011-5130.md): dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register\_globals is enabled, allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2011-5131](https://cve.now/CVE-2011-5131.md): Cross-site request forgery (CSRF) vulnerability in global.php in MyBB before 1.6.5 allows remote attackers to hijack the authentication of a (no CVSS)
- [CVE-2011-5132](https://cve.now/CVE-2011-5132.md): Cross-site scripting (XSS) vulnerability in MyBB before 1.6.5 allows remote attackers to inject arbitrary web script or HTML via vectors rel (no CVSS)
- [CVE-2011-5133](https://cve.now/CVE-2011-5133.md): Unspecified vulnerability in MyBB before 1.6.5 has unknown impact and attack vectors, related to an "unparsed user avatar in the buddy list. (no CVSS)
- [CVE-2011-5134](https://cve.now/CVE-2011-5134.md): Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joomla! allows remote au (no CVSS)
- [CVE-2011-5135](https://cve.now/CVE-2011-5135.md): Multiple SQL injection vulnerabilities in the save\_connection function in lib/lib.iotask.php in the iotask module in DoceboLMS 4.0.4 and ear (no CVSS)
- [CVE-2011-5136](https://cve.now/CVE-2011-5136.md): showImg.php in EPractize Labs Subscription Manager, possibly 1.0, allows remote attackers to overwrite arbitrary files via the db parameter. (no CVSS)
- [CVE-2012-3325](https://cve.now/CVE-2012-3325.md): IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.5, and 8.5.x Full Profile before 8.5 (no CVSS)
- [CVE-2012-3548](https://cve.now/CVE-2012-3548.md): The dissect\_drda function in epan/dissectors/packet-drda.c in Wireshark 1.6.x through 1.6.10 and 1.8.x through 1.8.2 allows remote attackers (no CVSS)
- [CVE-2012-3253](https://cve.now/CVE-2012-3253.md): Multiple unspecified vulnerabilities in HP Intelligent Management Center (IMC) before 5.0 E0101P05 allow remote attackers to execute arbitra (no CVSS)
- [CVE-2012-3254](https://cve.now/CVE-2012-3254.md): Multiple unspecified vulnerabilities in HP iNode Management Center before iNode PC 5.1 E0304 allow remote attackers to execute arbitrary cod (no CVSS)
- [CVE-2012-4010](https://cve.now/CVE-2012-4010.md): Opera before 11.60 allows remote attackers to spoof the address bar via unspecified homograph characters, a different vulnerability than CVE (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-08-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.