# CVEs published 2012-09-16

16 CVEs were published on September 16, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-3051](https://cve.now/CVE-2012-3051.md): Cisco NX-OS 5.2 and 6.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service (process crash or packet loss) vi (no CVSS)
- [CVE-2012-3052](https://cve.now/CVE-2012-3052.md): Untrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges via a Trojan horse DLL in the current work (no CVSS)
- [CVE-2012-3060](https://cve.now/CVE-2012-3060.md): Cisco Unity Connection (UC) 8.6, 9.0, and 9.5 allows remote attackers to cause a denial of service (CPU consumption) via malformed UDP packe (no CVSS)
- [CVE-2012-3079](https://cve.now/CVE-2012-3079.md): Cisco IOS 12.2 allows remote attackers to cause a denial of service (CPU consumption) by establishing many IPv6 neighbors, aka Bug ID CSCtn7 (no CVSS)
- [CVE-2012-3088](https://cve.now/CVE-2012-3088.md): Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495, and 3.2.x, does not check whether an HTTP request originally contains ScanSa (no CVSS)
- [CVE-2012-3094](https://cve.now/CVE-2012-3094.md): The VPN downloader in the download\_install component in Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495 on Linux accepts arbi (no CVSS)
- [CVE-2012-3096](https://cve.now/CVE-2012-3096.md): Cisco Unity Connection (UC) 7.1, 8.0, and 8.5 allows remote authenticated users to cause a denial of service (resource consumption and admin (no CVSS)
- [CVE-2012-3893](https://cve.now/CVE-2012-3893.md): The FlexVPN implementation in Cisco IOS 15.2 and 15.3 allows remote authenticated users to cause a denial of service (spoke crash) via spoke (no CVSS)
- [CVE-2012-3895](https://cve.now/CVE-2012-3895.md): Cisco IOS 15.0 through 15.3 allows remote authenticated users to cause a denial of service (device crash) via an MVPNv6 update, aka Bug ID C (no CVSS)
- [CVE-2012-3899](https://cve.now/CVE-2012-3899.md): sensorApp on Cisco IPS 4200 series sensors 6.0, 6.2, and 7.0 does not properly allocate memory, which allows remote attackers to cause a den (no CVSS)
- [CVE-2012-3901](https://cve.now/CVE-2012-3901.md): The updateTime function in sensorApp on Cisco IPS 4200 series sensors 7.0 and 7.1 allows remote attackers to cause a denial of service (proc (no CVSS)
- [CVE-2012-3908](https://cve.now/CVE-2012-3908.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the ISE Administrator user interface (aka the Apache Tomcat interface) on Cisc (no CVSS)
- [CVE-2012-3915](https://cve.now/CVE-2012-3915.md): The DMVPN tunnel implementation in Cisco IOS 15.2 allows remote attackers to cause a denial of service (persistent IKE state) via a large vo (no CVSS)
- [CVE-2012-3919](https://cve.now/CVE-2012-3919.md): The Cisco Application Control Engine (ACE) module 3.0 for Cisco Catalyst switches and Cisco routers does not properly monitor Load Balancer (no CVSS)
- [CVE-2012-3923](https://cve.now/CVE-2012-3923.md): The SSLVPN implementation in Cisco IOS 12.4, 15.0, 15.1, and 15.2, when DTLS is not enabled, does not properly handle certain outbound ACL c (no CVSS)
- [CVE-2012-3924](https://cve.now/CVE-2012-3924.md): The SSLVPN implementation in Cisco IOS 15.1 and 15.2, when DTLS is enabled, does not properly handle certain outbound ACL configurations, wh (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-09-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.