# CVEs published 2012-09-24

3 CVEs were published on September 24, 2012: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2012-3451](https://cve.now/CVE-2012-3451.md): Apache CXF before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to execute unintended web-service operations by (no CVSS, org.apache.cxf:cxf)
- [CVE-2012-4655](https://cve.now/CVE-2012-4655.md): The WebLaunch feature in Cisco Secure Desktop before 3.6.6020 does not properly validate binaries that are received by the downloader proces (no CVSS)
- [CVE-2012-5054](https://cve.now/CVE-2012-5054.md): Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to exec (CVSS 8.8, KEV)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-09-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.