# CVEs published 2012-12-04

6 CVEs were published on December 4, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-5975](https://cve.now/CVE-2012-5975.md): The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6.2.0 through 6.2.5, and 6.3.0 thro (no CVSS)
- [CVE-2012-6066](https://cve.now/CVE-2012-6066.md): freeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a crafted session, as demonstrated by an OpenSSH (no CVSS)
- [CVE-2012-6067](https://cve.now/CVE-2012-6067.md): freeFTPd.exe in freeFTPd through 1.0.11 allows remote attackers to bypass authentication via a crafted SFTP session, as demonstrated by an O (no CVSS)
- [CVE-2012-5129](https://cve.now/CVE-2012-5129.md): Heap-based buffer overflow in the WebGL subsystem in Google Chrome OS before 23.0.1271.94 allows remote attackers to cause a denial of servi (no CVSS)
- [CVE-2012-5137](https://cve.now/CVE-2012-5137.md): Use-after-free vulnerability in Google Chrome before 23.0.1271.95 allows remote attackers to cause a denial of service or possibly have unsp (no CVSS)
- [CVE-2012-5138](https://cve.now/CVE-2012-5138.md): Google Chrome before 23.0.1271.95 does not properly handle file paths, which has unspecified impact and attack vectors. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-12-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.