# CVEs published 2012-10-09

63 CVEs were published on October 9, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-3505](https://cve.now/CVE-2012-3505.md): Tinyproxy 1.8.3 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via (1) a large number of head (no CVSS)
- [CVE-2012-3549](https://cve.now/CVE-2012-3549.md): The SCTP implementation in FreeBSD 8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via (no CVSS)
- [CVE-2012-4002](https://cve.now/CVE-2012-4002.md): Cross-site request forgery (CSRF) vulnerability in GLPI-PROJECT GLPI before 0.83.3 allows remote attackers to hijack the authentication of u (no CVSS)
- [CVE-2012-4003](https://cve.now/CVE-2012-4003.md): Multiple cross-site scripting (XSS) vulnerabilities in GLPI-PROJECT GLPI before 0.83.3 allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2012-4399](https://cve.now/CVE-2012-4399.md): The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via XML data containing e (no CVSS, cakephp/cakephp)
- [CVE-2012-4418](https://cve.now/CVE-2012-4418.md): Apache Axis2 allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack." (no CVSS, org.apache.axis2:axis2)
- [CVE-2012-4452](https://cve.now/CVE-2012-4452.md): MySQL 5.0.88, and possibly other versions and platforms, allows local users to bypass certain privilege checks by calling CREATE TABLE on a (no CVSS)
- [CVE-2012-4453](https://cve.now/CVE-2012-4453.md): dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initramfs images with wor (no CVSS)
- [CVE-2012-5351](https://cve.now/CVE-2012-5351.md): Apache Axis2 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a (no CVSS, org.apache.axis2:axis2)
- [CVE-2012-5352](https://cve.now/CVE-2012-5352.md): Java Open Single Sign-On Project Home (JOSSO) allows remote attackers to forge messages and bypass authentication via a SAML assertion that (no CVSS)
- [CVE-2012-5353](https://cve.now/CVE-2012-5353.md): Eduserv OpenAthens SP 2.0 for Java allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Sig (no CVSS)
- [CVE-2012-0182](https://cve.now/CVE-2012-0182.md): Microsoft Word 2007 SP2 and SP3 does not properly handle memory during the parsing of Word documents, which allows remote attackers to execu (no CVSS)
- [CVE-2012-2520](https://cve.now/CVE-2012-2520.md): Cross-site scripting (XSS) vulnerability in Microsoft InfoPath 2007 SP2 and SP3 and 2010 SP1, Communicator 2007 R2, Lync 2010 and 2010 Atten (no CVSS)
- [CVE-2012-2528](https://cve.now/CVE-2012-2528.md): Use-after-free vulnerability in Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; (no CVSS)
- [CVE-2012-2529](https://cve.now/CVE-2012-2529.md): Integer overflow in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, (no CVSS)
- [CVE-2012-2550](https://cve.now/CVE-2012-2550.md): Microsoft Works 9 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted Word (no CVSS)
- [CVE-2012-2551](https://cve.now/CVE-2012-2551.md): The server in Kerberos in Microsoft Windows Server 2008 R2 and R2 SP1, and Windows 7 Gold and SP1, allows remote attackers to cause a denial (no CVSS)
- [CVE-2012-2552](https://cve.now/CVE-2012-2552.md): Cross-site scripting (XSS) vulnerability in the SQL Server Report Manager in Microsoft SQL Server 2000 Reporting Services SP2 and SQL Server (no CVSS)
- [CVE-2012-3436](https://cve.now/CVE-2012-3436.md): OpenTTD 0.6.0 through 1.2.1 does not properly validate requests to clear a water tile, which allows remote attackers to cause a denial of se (no CVSS)
- [CVE-2011-5209](https://cve.now/CVE-2011-5209.md): Cross-site scripting (XSS) vulnerability in search/ in GraphicsClone Script, possibly 1.11, allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2011-5210](https://cve.now/CVE-2011-5210.md): Directory traversal vulnerability in admin/preview.php in Limny 3.0.0 allows remote attackers to read arbitrary files via a ..%2F (encoded d (no CVSS)
- [CVE-2012-4456](https://cve.now/CVE-2012-4456.md): The (1) OS-KSADM/services and (2) tenant APIs in OpenStack Keystone Essex before 2012.1.2 and Folsom before folsom-2 do not properly validat (no CVSS, keystone)
- [CVE-2012-4457](https://cve.now/CVE-2012-4457.md): OpenStack Keystone Essex before 2012.1.2 and Folsom before folsom-3 does not properly handle authorization tokens for disabled tenants, whic (no CVSS, keystone)
- [CVE-2012-5341](https://cve.now/CVE-2012-5341.md): Multiple cross-site scripting (XSS) vulnerabilities in statistik.php in Otterware StatIt 4 allow remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2012-5342](https://cve.now/CVE-2012-5342.md): Multiple SQL injection vulnerabilities in SenseSites CommonSense CMS allow remote attackers to execute arbitrary SQL commands via the id par (no CVSS)
- [CVE-2012-5343](https://cve.now/CVE-2012-5343.md): Cross-site scripting (XSS) vulnerability in admin/login.php in Limny 3.0.1 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2012-5344](https://cve.now/CVE-2012-5344.md): Directory traversal vulnerability in the WebServer (Thttpd.bat) in IpTools (aka Tiny TCP/IP server) 0.1.4 allows remote attackers to read ar (no CVSS)
- [CVE-2012-5345](https://cve.now/CVE-2012-5345.md): Buffer overflow in the Remote command server (Rcmd.bat) in IpTools (aka Tiny TCP/IP server) 0.1.4 allows remote attackers to cause a denial (no CVSS)
- [CVE-2012-5346](https://cve.now/CVE-2012-5346.md): Cross-site scripting (XSS) vulnerability in wp-live.php in the WP Live.php module 1.2.1 for WordPress allows remote attackers to inject arbi (no CVSS)
- [CVE-2012-5347](https://cve.now/CVE-2012-5347.md): TinyWebGallery 1.8.3 allows remote attackers to execute arbitrary code via shell metacharacters in the command parameter to (1) inc/filefunc (no CVSS)
- [CVE-2012-5348](https://cve.now/CVE-2012-5348.md): SQL injection vulnerability in MangosWeb Enhanced 3.0.3 allows remote attackers to execute arbitrary SQL commands via the login parameter in (no CVSS)
- [CVE-2012-5349](https://cve.now/CVE-2012-5349.md): Multiple cross-site scripting (XSS) vulnerabilities in pay.php in the Pay With Tweet plugin before 1.2 allow remote attackers to inject arbi (no CVSS)
- [CVE-2012-5350](https://cve.now/CVE-2012-5350.md): SQL injection vulnerability in the Pay With Tweet plugin before 1.2 for WordPress allows remote authenticated users with certain permissions (no CVSS)
- [CVE-2012-2900](https://cve.now/CVE-2012-2900.md): Skia, as used in Google Chrome before 22.0.1229.92, does not properly render text, which allows remote attackers to cause a denial of servic (no CVSS)
- [CVE-2012-5108](https://cve.now/CVE-2012-5108.md): Race condition in Google Chrome before 22.0.1229.92 allows remote attackers to execute arbitrary code via vectors related to audio devices. (no CVSS)
- [CVE-2012-5109](https://cve.now/CVE-2012-5109.md): The International Components for Unicode (ICU) functionality in Google Chrome before 22.0.1229.92 allows remote attackers to cause a denial (no CVSS)
- [CVE-2012-5110](https://cve.now/CVE-2012-5110.md): The compositor in Google Chrome before 22.0.1229.92 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecifie (no CVSS)
- [CVE-2012-5111](https://cve.now/CVE-2012-5111.md): Google Chrome before 22.0.1229.92 does not monitor for crashes of Pepper plug-ins, which has unspecified impact and remote attack vectors. (no CVSS)
- [CVE-2012-5248](https://cve.now/CVE-2012-5248.md): Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x b (no CVSS)
- [CVE-2012-5249](https://cve.now/CVE-2012-5249.md): Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x b (no CVSS)
- [CVE-2012-5250](https://cve.now/CVE-2012-5250.md): Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x b (no CVSS)
- [CVE-2012-5251](https://cve.now/CVE-2012-5251.md): Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x b (no CVSS)
- [CVE-2012-5252](https://cve.now/CVE-2012-5252.md): Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 (no CVSS)
- [CVE-2012-5253](https://cve.now/CVE-2012-5253.md): Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x b (no CVSS)
- [CVE-2012-5254](https://cve.now/CVE-2012-5254.md): Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x b (no CVSS)
- [CVE-2012-5255](https://cve.now/CVE-2012-5255.md): Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x b (no CVSS)
- [CVE-2012-5256](https://cve.now/CVE-2012-5256.md): Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 (no CVSS)
- [CVE-2012-5257](https://cve.now/CVE-2012-5257.md): Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x b (no CVSS)
- [CVE-2012-5258](https://cve.now/CVE-2012-5258.md): Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 (no CVSS)
- [CVE-2012-5259](https://cve.now/CVE-2012-5259.md): Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x b (no CVSS)
- [CVE-2012-5260](https://cve.now/CVE-2012-5260.md): Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x b (no CVSS)
- [CVE-2012-5261](https://cve.now/CVE-2012-5261.md): Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 (no CVSS)
- [CVE-2012-5262](https://cve.now/CVE-2012-5262.md): Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x b (no CVSS)
- [CVE-2012-5263](https://cve.now/CVE-2012-5263.md): Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 (no CVSS)
- [CVE-2012-5264](https://cve.now/CVE-2012-5264.md): Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x b (no CVSS)
- [CVE-2012-5265](https://cve.now/CVE-2012-5265.md): Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x b (no CVSS)
- [CVE-2012-5266](https://cve.now/CVE-2012-5266.md): Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x b (no CVSS)
- [CVE-2012-5267](https://cve.now/CVE-2012-5267.md): Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 (no CVSS)
- [CVE-2012-5268](https://cve.now/CVE-2012-5268.md): Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 (no CVSS)
- [CVE-2012-5269](https://cve.now/CVE-2012-5269.md): Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 (no CVSS)
- [CVE-2012-5270](https://cve.now/CVE-2012-5270.md): Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 (no CVSS)
- [CVE-2012-5271](https://cve.now/CVE-2012-5271.md): Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 (no CVSS)
- [CVE-2012-5272](https://cve.now/CVE-2012-5272.md): Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-10-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.