# CVEs published 2012-09-14

11 CVEs were published on September 14, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-4013](https://cve.now/CVE-2012-4013.md): The WebView class in the Cybozu KUNAI Browser for Remote Service application beta for Android allows remote attackers to execute arbitrary J (no CVSS)
- [CVE-2012-4682](https://cve.now/CVE-2012-4682.md): Unspecified vulnerability in bitcoind and Bitcoin-Qt allows attackers to cause a denial of service via unknown vectors, a different vulnerab (no CVSS)
- [CVE-2012-4683](https://cve.now/CVE-2012-4683.md): Unspecified vulnerability in bitcoind and Bitcoin-Qt allows attackers to cause a denial of service via unknown vectors, a different vulnerab (no CVSS)
- [CVE-2012-4817](https://cve.now/CVE-2012-4817.md): The NFSv4 client implementation in IBM AIX 5.3, 6.1, and 7.1, and VIOS before 2.2.1.4-FP-25 SP-02, does not properly handle GID values, whic (no CVSS)
- [CVE-2010-5106](https://cve.now/CVE-2010-5106.md): The XML-RPC remote publishing interface in xmlrpc.php in WordPress before 3.0.3 does not properly check capabilities, which allows remote au (no CVSS)
- [CVE-2012-4421](https://cve.now/CVE-2012-4421.md): The create\_post function in wp-includes/class-wp-atom-server.php in WordPress before 3.4.2 does not perform a capability check, which allows (no CVSS)
- [CVE-2012-4422](https://cve.now/CVE-2012-4422.md): wp-admin/plugins.php in WordPress before 3.4.2, when the multisite feature is enabled, does not check for network-administrator privileges b (no CVSS)
- [CVE-2012-4419](https://cve.now/CVE-2012-4419.md): The compare\_tor\_addr\_to\_addr\_policy function in or/policies.c in Tor before 0.2.2.39, and 0.2.3.x before 0.2.3.21-rc, allows remote attacker (no CVSS)
- [CVE-2012-4922](https://cve.now/CVE-2012-4922.md): The tor\_timegm function in common/util.c in Tor before 0.2.2.39, and 0.2.3.x before 0.2.3.22-rc, does not properly validate time values, whi (no CVSS)
- [CVE-2012-3955](https://cve.now/CVE-2012-3955.md): ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon crash) in opportunis (no CVSS)
- [CVE-2012-4244](https://cve.now/CVE-2012-4244.md): ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attac (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-09-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.