# CVEs published 2012-09-15

29 CVEs were published on September 15, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-4929](https://cve.now/CVE-2012-4929.md): The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compressed data without pro (no CVSS)
- [CVE-2012-4930](https://cve.now/CVE-2012-4930.md): The SPDY protocol 3 and earlier, as used in Mozilla Firefox, Google Chrome, and other products, can perform TLS encryption of compressed dat (no CVSS)
- [CVE-2011-5162](https://cve.now/CVE-2011-5162.md): Stack-based buffer overflow in GOM Player 2.1.33.5071 allows user-assisted remote attackers to execute arbitrary code via a .ASX file with a (no CVSS)
- [CVE-2011-5163](https://cve.now/CVE-2011-5163.md): Buffer overflow in an unspecified third-party component in the Batch module for Schneider Electric CitectSCADA before 7.20 and Mitsubishi MX (no CVSS)
- [CVE-2011-5164](https://cve.now/CVE-2011-5164.md): Stack-based buffer overflow in VanDyke Software AbsoluteFTP 1.9.6 through 2.2.10 allows remote FTP servers to execute arbitrary code via a c (no CVSS)
- [CVE-2011-5165](https://cve.now/CVE-2011-5165.md): Stack-based buffer overflow in Free MP3 CD Ripper 1.1, 2.6 and earlier, when converting a file, allows user-assisted remote attackers to exe (no CVSS)
- [CVE-2011-5166](https://cve.now/CVE-2011-5166.md): Multiple stack-based buffer overflows in KnFTP 1.0.0 allow remote attackers to execute arbitrary code via a long string to the (1) USER, (2) (no CVSS)
- [CVE-2011-5167](https://cve.now/CVE-2011-5167.md): Heap-based buffer overflow in the SetDevNames method of the Tidestone Formula One ActiveX control (TTF16.ocx) 6.3.5 Build 1 in Oracle Hyperi (no CVSS)
- [CVE-2011-5168](https://cve.now/CVE-2011-5168.md): SQL injection vulnerability in user.php in Banana Dance before B.1.5 allows remote attackers to execute arbitrary SQL commands via the id pa (no CVSS)
- [CVE-2011-5169](https://cve.now/CVE-2011-5169.md): SQL injection vulnerability in sgms/reports/scheduledreports/configure/scheduleProps.jsp in SonicWall ViewPoint 6.0 SP2 allows remote attack (no CVSS)
- [CVE-2011-5170](https://cve.now/CVE-2011-5170.md): Stack-based buffer overflow in Castillo Bueno Systems CCMPlayer 1.5 allows remote attackers to execute arbitrary code via a long track name (no CVSS)
- [CVE-2011-5171](https://cve.now/CVE-2011-5171.md): Multiple stack-based buffer overflows in CyberLink Power2Go 7 (build 196) and 8 (build 1031) allow remote attackers to execute arbitrary cod (no CVSS)
- [CVE-2011-5172](https://cve.now/CVE-2011-5172.md): Stack-based buffer overflow in StoryBoard Quick 6 Build 3786, and possibly StoryBoard Artist and StoryBoard Studio, allows remote attackers (no CVSS)
- [CVE-2011-5173](https://cve.now/CVE-2011-5173.md): Buffer overflow in Bugbear Entertainment FlatOut 2005 allows user-assisted remote attackers to cause a denial of service (crash) and possibl (no CVSS)
- [CVE-2011-5174](https://cve.now/CVE-2011-5174.md): Buffer overflow in Intel Trusted Execution Technology (TXT) SINIT Authenticated Code Modules (ACM) in Intel Q67 Express, C202, C204, C206 Ch (no CVSS)
- [CVE-2011-5175](https://cve.now/CVE-2011-5175.md): SQL injection vulnerability in search.php in Banana Dance, possibly B.1.5 and earlier, allows remote attackers to execute arbitrary SQL comm (no CVSS)
- [CVE-2011-5176](https://cve.now/CVE-2011-5176.md): Multiple cross-site scripting (XSS) vulnerabilities in search.php in Banana Dance, possibly B.1.5 and earlier, allow remote attackers to inj (no CVSS)
- [CVE-2012-2275](https://cve.now/CVE-2012-2275.md): Multiple cross-site request forgery (CSRF) vulnerabilities in TestLink 1.9.3 and earlier allow remote attackers to hijack the authentication (no CVSS)
- [CVE-2012-3233](https://cve.now/CVE-2012-3233.md): Cross-site scripting (XSS) vulnerability in \_\_swift/thirdparty/PHPExcel/PHPExcel/Shared/JAMA/docs/download.php in Kayako Fusion 4.40.1148, a (no CVSS)
- [CVE-2012-3458](https://cve.now/CVE-2012-3458.md): Beaker before 1.6.4, when using PyCrypto to encrypt sessions, uses AES in ECB cipher mode, which might allow remote attackers to obtain port (no CVSS, beaker)
- [CVE-2012-4336](https://cve.now/CVE-2012-4336.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flogr 2.5.6 and earlier allow remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2012-4923](https://cve.now/CVE-2012-4923.md): Multiple cross-site scripting (XSS) vulnerabilities in Endian Firewall 2.4 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2012-4924](https://cve.now/CVE-2012-4924.md): Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers (no CVSS)
- [CVE-2012-4925](https://cve.now/CVE-2012-4925.md): Multiple SQL injection vulnerabilities in approve.php in Img Pals Photo Host 1.0 allow remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2012-4926](https://cve.now/CVE-2012-4926.md): approve.php in Img Pals Photo Host 1.0 does not authenticate requests, which allows remote attackers to change the activation of administrat (no CVSS)
- [CVE-2012-4927](https://cve.now/CVE-2012-4927.md): SQL injection vulnerability in Limesurvey (a.k.a PHPSurveyor) before 1.91+ Build 120224 and earlier allows remote attackers to execute arbit (no CVSS)
- [CVE-2012-4928](https://cve.now/CVE-2012-4928.md): Cross-site scripting (XSS) vulnerability in ow\_updates/index.php in Oxwall 1.1.1 allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2012-4001](https://cve.now/CVE-2012-4001.md): The mod\_pagespeed module before 0.10.22.6 for the Apache HTTP Server does not properly verify its host name, which allows remote attackers t (no CVSS)
- [CVE-2012-4360](https://cve.now/CVE-2012-4360.md): Cross-site scripting (XSS) vulnerability in the mod\_pagespeed module 0.10.19.1 through 0.10.22.4 for the Apache HTTP Server allows remote at (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-09-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.