# CVEs published 2012-09-04

13 CVEs were published on September 4, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-1605](https://cve.now/CVE-2012-1605.md): The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unserializes untrusted data, which allows remote attackers to unserialize a (no CVSS, typo3/cms)
- [CVE-2012-1606](https://cve.now/CVE-2012-1606.md): Multiple cross-site scripting (XSS) vulnerabilities in the Backend component in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 thro (no CVSS, typo3/cms)
- [CVE-2012-1607](https://cve.now/CVE-2012-1607.md): The Command Line Interface (CLI) script in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote (no CVSS, typo3/cms)
- [CVE-2012-1608](https://cve.now/CVE-2012-1608.md): The t3lib\_div::RemoveXSS API method in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6.0 allows remote att (no CVSS, typo3/cms)
- [CVE-2012-1613](https://cve.now/CVE-2012-1613.md): Cross-site scripting (XSS) vulnerability in edit\_one\_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote authenticated users wit (no CVSS)
- [CVE-2012-1614](https://cve.now/CVE-2012-1614.md): Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via (1) a direct request to plugins/visibleho (no CVSS)
- [CVE-2012-2109](https://cve.now/CVE-2012-2109.md): SQL injection vulnerability in wp-load.php in the BuddyPress plugin 1.5.x before 1.5.5 of WordPress allows remote attackers to execute arbit (no CVSS)
- [CVE-2012-0275](https://cve.now/CVE-2012-0275.md): Heap-based buffer overflow in Photoshop.exe in Adobe Photoshop CS5 12.x before 12.0.5, CS5.1 12.1.x before 12.1.1, and CS6 13.x before 13.0. (no CVSS)
- [CVE-2012-2288](https://cve.now/CVE-2012-2288.md): Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.0.1, allows remote a (no CVSS)
- [CVE-2012-3014](https://cve.now/CVE-2012-3014.md): The Management Software application in GarrettCom Magnum MNS-6K before 4.4.0, and 14.x before 14.4.0, has a hardcoded password for an admini (no CVSS)
- [CVE-2012-3582](https://cve.now/CVE-2012-3582.md): Symantec PGP Universal Server 3.2.x before 3.2.1 MP2 does not properly manage sessions that include key search requests, which might allow r (no CVSS)
- [CVE-2012-3981](https://cve.now/CVE-2012-3981.md): Auth/Verify/LDAP.pm in Bugzilla 2.x and 3.x before 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x and 4.2.x before 4.2.3, and 4.3.x before 4.3. (no CVSS)
- [CVE-2012-4747](https://cve.now/CVE-2012-4747.md): Bugzilla 2.x and 3.x through 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x and 4.2.x before 4.2.3, and 4.3.x before 4.3.3 stores potentially s (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-09-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.