# CVEs published 2012-12-13

15 CVEs were published on December 13, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2011-3131](https://cve.now/CVE-2011-3131.md): Xen 4.1.1 and earlier allows local guest OS kernels with control of a PCI\[E\] device to cause a denial of service (CPU consumption and host h (no CVSS)
- [CVE-2012-3276](https://cve.now/CVE-2012-3276.md): HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not properly implement the (no CVSS)
- [CVE-2012-3277](https://cve.now/CVE-2012-3277.md): HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not properly implement the (no CVSS)
- [CVE-2012-4991](https://cve.now/CVE-2012-4991.md): Multiple directory traversal vulnerabilities in Axway SecureTransport 5.1 SP2 and earlier allow remote authenticated users to (1) read, (2) (no CVSS)
- [CVE-2012-5510](https://cve.now/CVE-2012-5510.md): Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, wh (no CVSS)
- [CVE-2012-5511](https://cve.now/CVE-2012-5511.md): Stack-based buffer overflow in the dirty video RAM tracking functionality in Xen 3.4 through 4.1 allows local HVM guest OS administrators to (no CVSS)
- [CVE-2012-5512](https://cve.now/CVE-2012-5512.md): Array index error in the HVMOP\_set\_mem\_access handler in Xen 4.1 allows local HVM guest OS administrators to cause a denial of service (cras (no CVSS)
- [CVE-2012-5513](https://cve.now/CVE-2012-5513.md): The XENMEM\_exchange handler in Xen 4.2 and earlier does not properly check the memory address, which allows local PV guest OS administrators (no CVSS)
- [CVE-2012-5514](https://cve.now/CVE-2012-5514.md): The guest\_physmap\_mark\_populate\_on\_demand function in Xen 4.2 and earlier does not properly unlock the subject GFNs when checking if they ar (no CVSS)
- [CVE-2012-5515](https://cve.now/CVE-2012-5515.md): The (1) XENMEM\_decrease\_reservation, (2) XENMEM\_populate\_physmap, and (3) XENMEM\_exchange hypercalls in Xen 4.2 and earlier allow local gues (no CVSS)
- [CVE-2012-5525](https://cve.now/CVE-2012-5525.md): The get\_page\_from\_gfn hypercall function in Xen 4.2 allows local PV guest OS administrators to cause a denial of service (crash) via a craft (no CVSS)
- [CVE-2012-5679](https://cve.now/CVE-2012-5679.md): Buffer underflow in Adobe Photoshop Camera Raw before 7.3 allows attackers to execute arbitrary code via unspecified vectors. (no CVSS)
- [CVE-2012-5680](https://cve.now/CVE-2012-5680.md): Buffer overflow in Adobe Photoshop Camera Raw before 7.3 allows attackers to execute arbitrary code via unspecified vectors. (no CVSS)
- [CVE-2012-5966](https://cve.now/CVE-2012-5966.md): The restricted telnet shell on the D-Link DSL2730U router allows remote authenticated users to bypass intended command restrictions via shel (no CVSS)
- [CVE-2012-6333](https://cve.now/CVE-2012-6333.md): Multiple HVM control operations in Xen 3.4 through 4.2 allow local HVM guest OS administrators to cause a denial of service (physical CPU co (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-12-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.