# CVEs published 2012-09-28 27 CVEs were published on September 28, 2012: 0 critical, 0 high. Days are UTC. - [CVE-2012-1833](https://cve.now/CVE-2012-1833.md): VMware SpringSource Grails before 1.3.8, and 2.x before 2.0.2, does not properly restrict data binding, which might allow remote attackers t (no CVSS) - [CVE-2012-4448](https://cve.now/CVE-2012-4448.md): Cross-site request forgery (CSRF) vulnerability in wp-admin/index.php in WordPress 3.4.2 allows remote attackers to hijack the authenticatio (no CVSS) - [CVE-2012-2680](https://cve.now/CVE-2012-2680.md): Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, does not properly restrict access to resources (no CVSS) - [CVE-2012-2681](https://cve.now/CVE-2012-2681.md): Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, uses predictable random numbers to generate se (no CVSS) - [CVE-2012-2683](https://cve.now/CVE-2012-2683.md): Multiple cross-site scripting (XSS) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (M (no CVSS) - [CVE-2012-2684](https://cve.now/CVE-2012-2684.md): Multiple SQL injection vulnerabilities in the get\_sample\_filters\_by\_signature function in Cumin before 0.1.5444, as used in Red Hat Enterpri (no CVSS) - [CVE-2012-2685](https://cve.now/CVE-2012-2685.md): Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticated users to cause a d (no CVSS) - [CVE-2012-2734](https://cve.now/CVE-2012-2734.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and (no CVSS) - [CVE-2012-2735](https://cve.now/CVE-2012-2735.md): Session fixation vulnerability in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remot (no CVSS) - [CVE-2012-3459](https://cve.now/CVE-2012-3459.md): Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticated users to modify Co (no CVSS) - [CVE-2012-3491](https://cve.now/CVE-2012-3491.md): src/condor\_schedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the permissions of jobs, which (no CVSS) - [CVE-2012-3492](https://cve.now/CVE-2012-3492.md): The filesystem authentication (condor\_io/condor\_auth\_fs.cpp) in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 uses authentication direct (no CVSS) - [CVE-2012-3493](https://cve.now/CVE-2012-3493.md): The command\_give\_request\_ad function in condor\_startd.V6/command.cpp Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 allows remote attacke (no CVSS) - [CVE-2012-5196](https://cve.now/CVE-2012-5196.md): Multiple buffer overflows in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors. (no CVSS) - [CVE-2012-5197](https://cve.now/CVE-2012-5197.md): Multiple unspecified vulnerabilities in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors related to (no CVSS) - [CVE-2012-0956](https://cve.now/CVE-2012-0956.md): ubiquity-slideshow-ubuntu before 58.2, during installation, allows remote man-in-the-middle attackers to execute arbitrary web script or HTM (no CVSS) - [CVE-2012-2145](https://cve.now/CVE-2012-2145.md): Apache Qpid 0.17 and earlier does not properly restrict incoming client connections, which allows remote attackers to cause a denial of serv (no CVSS) - [CVE-2012-0417](https://cve.now/CVE-2012-0417.md): Integer overflow in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 allows remo (no CVSS) - [CVE-2012-0418](https://cve.now/CVE-2012-0418.md): Unspecified vulnerability in the client in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 on Windows allows user- (no CVSS) - [CVE-2012-0419](https://cve.now/CVE-2012-0419.md): Directory traversal vulnerability in the agent HTTP interfaces in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pack 1 (no CVSS) - [CVE-2012-2998](https://cve.now/CVE-2012-2998.md): SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager (TMCM) before 5.5.0.1823 and 6.0 before 6.0.0.1449 all (no CVSS) - [CVE-2012-4016](https://cve.now/CVE-2012-4016.md): The ATOK application before 1.0.4 for Android allows remote attackers to read the learning information file, and obtain sensitive input-stri (no CVSS) - [CVE-2012-4017](https://cve.now/CVE-2012-4017.md): The jigbrowser+ application before 1.5.0 for Android does not properly implement the WebView class, which allows remote attackers to obtain (no CVSS) - [CVE-2012-4051](https://cve.now/CVE-2012-4051.md): Multiple cross-site request forgery (CSRF) vulnerabilities in editAccount.html in the JAMF Software Server (JSS) interface in JAMF Casper Su (no CVSS) - [CVE-2012-4912](https://cve.now/CVE-2012-4912.md): Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 and 2012 before Support Pa (no CVSS) - [CVE-2012-5048](https://cve.now/CVE-2012-5048.md): APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and d (no CVSS) - [CVE-2012-5049](https://cve.now/CVE-2012-5049.md): APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service (infinite loop) via a malformed (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2012-09-28 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.