# CVEs published 2012-10-06

14 CVEs were published on October 6, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-1618](https://cve.now/CVE-2012-1618.md): Interaction error in the PostgreSQL JDBC driver before 8.2, when used with a PostgreSQL server with the "standard\_conforming\_strings" option (no CVSS, org.postgresql:postgresql)
- [CVE-2012-5304](https://cve.now/CVE-2012-5304.md): Static code injection vulnerability in administration/install.php in YVS Image Gallery allows remote attackers to inject arbitrary PHP code (no CVSS)
- [CVE-2012-5305](https://cve.now/CVE-2012-5305.md): Cross-site scripting (XSS) vulnerability in CMD\_DOMAIN in JBMC Software DirectAdmin 1.403 allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2012-5306](https://cve.now/CVE-2012-5306.md): Stack-based buffer overflow in the SelectDirectory method in DcsCliCtrl.dll in Camera Stream Client ActiveX Control, as used in D-Link DCS-5 (no CVSS)
- [CVE-2011-4932](https://cve.now/CVE-2011-4932.md): Eval injection vulnerability in ip\_cms/modules/standard/content\_management/actions.php in ImpressPages CMS 1.0.12 and possibly other versons (no CVSS, impresspages/impresspages)
- [CVE-2012-0065](https://cve.now/CVE-2012-0065.md): Heap-based buffer overflow in the receive\_packet function in libusbmuxd/libusbmuxd.c in usbmuxd 1.0.5 through 1.0.7 allows physically proxim (no CVSS)
- [CVE-2012-0986](https://cve.now/CVE-2012-0986.md): Multiple cross-site scripting (XSS) vulnerabilities in ImpressCMS 1.2.x before 1.2.7 Final and 1.3.x before 1.3.1 Final allow remote attacke (no CVSS)
- [CVE-2012-0987](https://cve.now/CVE-2012-0987.md): Directory traversal vulnerability in edituser.php in ImpressCMS 1.2.x before 1.2.7 Final and 1.3.x before 1.3.1 Final allows remote authenti (no CVSS)
- [CVE-2012-1153](https://cve.now/CVE-2012-1153.md): Unrestricted file upload vulnerability in addons/uploadify/uploadify.php in appRain CMF 0.1.5 and earlier allows remote attackers to execute (no CVSS)
- [CVE-2012-1564](https://cve.now/CVE-2012-1564.md): Cross-site scripting (XSS) vulnerability in administration/create\_album.php in YVS Image Gallery allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2012-1565](https://cve.now/CVE-2012-1565.md): Unspecified vulnerability in ez Publish 4.1.4, 4.2, 4.3, 4.4, 4.5, and 4.6 has unknown impact and attack vectors related to an insecure dire (no CVSS)
- [CVE-2012-1623](https://cve.now/CVE-2012-1623.md): The Registration Codes module before 6.x-2.4 for Drupal does not restrict access to the registration code list, which might allow remote att (no CVSS)
- [CVE-2012-1624](https://cve.now/CVE-2012-1624.md): Multiple cross-site scripting (XSS) vulnerabilities in the Lingotek module 6.x-1.x before 6.x-1.40 for Drupal allow remote authenticated use (no CVSS)
- [CVE-2012-1634](https://cve.now/CVE-2012-1634.md): Cross-site scripting (XSS) vulnerability in video\_filter.codecs.inc in the Video Filter module 6.x-2.x and 7.x-2.x for Drupal allows remote (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-10-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.