# CVEs published 2012-10-07

10 CVEs were published on October 7, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2011-4363](https://cve.now/CVE-2011-4363.md): ProcessTable.pm in the Proc::ProcessTable module 0.45 for Perl, when TTY information caching is enabled, allows local users to overwrite arb (no CVSS)
- [CVE-2011-4909](https://cve.now/CVE-2011-4909.md): Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.5.12 allow remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2011-4910](https://cve.now/CVE-2011-4910.md): Cross-site scripting (XSS) vulnerability in Joomla! before 1.5.12 allows remote attackers to inject arbitrary web script or HTML via the PAT (no CVSS)
- [CVE-2011-4911](https://cve.now/CVE-2011-4911.md): Joomla! before 1.5.12 does not perform a JEXEC check in unspecified files, which allows remote attackers to obtain the installation path via (no CVSS)
- [CVE-2012-1414](https://cve.now/CVE-2012-1414.md): Cross-site request forgery (CSRF) vulnerability in manager/news.php in Plume CMS 1.2.4 and earlier allows remote attackers to hijack the aut (no CVSS)
- [CVE-2010-5275](https://cve.now/CVE-2010-5275.md): Cross-site scripting (XSS) vulnerability in memcache\_admin in the Memcache module 5.x before 5.x-1.10 and 6.x before 6.x-1.6 for Drupal allo (no CVSS)
- [CVE-2010-5276](https://cve.now/CVE-2010-5276.md): The Memcache module 5.x before 5.x-1.10 and 6.x before 6.x-1.6 for Drupal does not properly handle the $user object in memcache\_admin, which (no CVSS)
- [CVE-2010-5277](https://cve.now/CVE-2010-5277.md): Unspecified vulnerability in the Views Bulk Operations module 6 before 6.x-1.10 for Drupal allows remote authenticated users with user manag (no CVSS)
- [CVE-2010-5278](https://cve.now/CVE-2010-5278.md): Directory traversal vulnerability in manager/controllers/default/resource/tvs.php in MODx Revolution 2.0.2-pl, and possibly earlier, when ma (no CVSS)
- [CVE-2011-3918](https://cve.now/CVE-2011-3918.md): The Zygote process in Android 4.0.3 and earlier accepts fork requests from processes with arbitrary UIDs, which allows remote attackers to c (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-10-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.