CVEs published December 18, 2012
18 CVEs were published on December 18, 2012: 0 critical, 0 high.
- Published
- 18
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 0
- Unrated
- 17
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- keystone
- 1
- Red Hat OpenStack Essex for RHEL · Red Hat OpenStack Fol… +2
- 1
- Tropos Mesh OS
- 1
Medium, low and unrated 18
- CVE-2012-4348The management console in Symantec Endpoint Protection (SEP) 11.0 before RU7-MP3 and 12.1 before RU2, and Symantec Endpoint Protection Small
- CVE-2012-4350Multiple unquoted Windows search path vulnerabilities in the (1) Manager and (2) Agent components in Symantec Enterprise Security Manager (E
- CVE-2012-4691Memory leak in Siemens Automation License Manager (ALM) 4.x and 5.x before 5.2 allows remote attackers to cause a denial of service (memory
- CVE-2012-4693Invensys Wonderware InTouch 2012 R2 and earlier and Siemens ProcessSuite use a weak encryption algorithm for data in Ps_security.ini, which
- CVE-2012-4898Tropos Wireless Mesh Routers Insufficient EntropyTropos Mesh OS
- CVE-2012-5468Heap-based buffer overflow in iconvert.c in the bogolexer component in Bogofilter before 1.2.3 allows remote attackers to cause a denial of
- CVE-2012-5563OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated userkeystone
- CVE-2012-5571Openstack keystone: openstack keystone: authorization bypass via improper ec2 token handlingRed Hat OpenStack Essex for RHEL · Red Hat OpenStack Fol… +2
- CVE-2012-5574lib/form/sfForm.class.php in Symfony CMS before 1.4.20 allows remote attackers to read arbitrary files via a crafted upload request.
- CVE-2012-5576Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow remote attackers to cause a denia
- CVE-2012-5606Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.9 and 4.5.0 allow remote attackers to inject arbitrary web script
- CVE-2012-5607The "Lost Password" reset functionality in ownCloud before 4.0.9 and 4.5.0 does not properly check the security token, which allows remote a
- CVE-2012-5608Cross-site scripting (XSS) vulnerability in apps/user_webdavauth/settings.php in ownCloud 4.5.x before 4.5.2 allows remote attackers to inje
- CVE-2012-5609Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.5.2 allows remote authenticated users to execute arbitrary PHP co
- CVE-2012-5610Incomplete blacklist vulnerability in lib/filesystem.php in ownCloud before 4.0.9 and 4.5.x before 4.5.2 allows remote authenticated users t
- CVE-2012-5622Cross-site request forgery (CSRF) vulnerability in the management console (openshift-console/app/controllers/application_controller.rb) in O
- CVE-2012-5195Heap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before 15
- CVE-2012-6422The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor,