# CVEs published 2012-10-05

12 CVEs were published on October 5, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-0845](https://cve.now/CVE-2012-0845.md): SimpleXMLRPCServer.py in SimpleXMLRPCServer in Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 allows remo (no CVSS)
- [CVE-2012-1150](https://cve.now/CVE-2012-1150.md): Python before 2.6.8, 2.7.x before 2.7.3, 3.x before 3.1.5, and 3.2.x before 3.2.3 computes hash values without restricting the ability to tr (no CVSS)
- [CVE-2012-4442](https://cve.now/CVE-2012-4442.md): Monkey HTTP Daemon 0.9.3 retains the supplementary group IDs of the root account during operations with a non-root effective UID, which migh (no CVSS)
- [CVE-2012-5303](https://cve.now/CVE-2012-5303.md): Monkey HTTP Daemon 0.9.3 might allow local users to overwrite arbitrary files via a symlink attack on a PID file, as demonstrated by a pathn (no CVSS)
- [CVE-2012-4443](https://cve.now/CVE-2012-4443.md): Monkey HTTP Daemon 0.9.3 uses a real UID of root and a real GID of root during execution of CGI scripts, which might allow local users to ga (no CVSS)
- [CVE-2012-4897](https://cve.now/CVE-2012-4897.md): Untrusted search path vulnerability in the installer in VMware Movie Decoder before 9.0 allows local users to gain privileges via a Trojan h (no CVSS)
- [CVE-2012-5050](https://cve.now/CVE-2012-5050.md): Cross-site scripting (XSS) vulnerability in the server in VMware vCenter Operations (aka vCOps) before 5.0.x allows remote attackers to inje (no CVSS)
- [CVE-2012-5051](https://cve.now/CVE-2012-5051.md): Directory traversal vulnerability in VMware CapacityIQ 1.5.x allows remote attackers to read arbitrary files via unspecified vectors. (no CVSS)
- [CVE-2012-4018](https://cve.now/CVE-2012-4018.md): Cross-site scripting (XSS) vulnerability in Final Beta Laboratory MyWebSearch before 1.23 allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2012-4894](https://cve.now/CVE-2012-4894.md): Google SketchUp before 8.0.14346 (aka 8 Maintenance 3) allows user-assisted remote attackers to execute arbitrary code or cause a denial of (no CVSS)
- [CVE-2012-4895](https://cve.now/CVE-2012-4895.md): Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a differen (no CVSS)
- [CVE-2012-4896](https://cve.now/CVE-2012-4896.md): Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a differen (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-10-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.