# CVEs published 2012-12-18

18 CVEs were published on December 18, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-4348](https://cve.now/CVE-2012-4348.md): The management console in Symantec Endpoint Protection (SEP) 11.0 before RU7-MP3 and 12.1 before RU2, and Symantec Endpoint Protection Small (no CVSS)
- [CVE-2012-4350](https://cve.now/CVE-2012-4350.md): Multiple unquoted Windows search path vulnerabilities in the (1) Manager and (2) Agent components in Symantec Enterprise Security Manager (E (no CVSS)
- [CVE-2012-4691](https://cve.now/CVE-2012-4691.md): Memory leak in Siemens Automation License Manager (ALM) 4.x and 5.x before 5.2 allows remote attackers to cause a denial of service (memory (no CVSS)
- [CVE-2012-4693](https://cve.now/CVE-2012-4693.md): Invensys Wonderware InTouch 2012 R2 and earlier and Siemens ProcessSuite use a weak encryption algorithm for data in Ps\_security.ini, which (no CVSS)
- [CVE-2012-4898](https://cve.now/CVE-2012-4898.md): Tropos Wireless Mesh Routers Insufficient Entropy (no CVSS, Tropos Mesh OS)
- [CVE-2012-5468](https://cve.now/CVE-2012-5468.md): Heap-based buffer overflow in iconvert.c in the bogolexer component in Bogofilter before 1.2.3 allows remote attackers to cause a denial of (no CVSS)
- [CVE-2012-5563](https://cve.now/CVE-2012-5563.md): OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated user (no CVSS, keystone)
- [CVE-2012-5571](https://cve.now/CVE-2012-5571.md): Openstack keystone: openstack keystone: authorization bypass via improper ec2 token handling (CVSS 5.4, Red Hat OpenStack Essex for RHEL · Red Hat OpenStack Fol… +2)
- [CVE-2012-5574](https://cve.now/CVE-2012-5574.md): lib/form/sfForm.class.php in Symfony CMS before 1.4.20 allows remote attackers to read arbitrary files via a crafted upload request. (no CVSS)
- [CVE-2012-5576](https://cve.now/CVE-2012-5576.md): Multiple stack-based buffer overflows in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.8.2 allow remote attackers to cause a denia (no CVSS)
- [CVE-2012-5606](https://cve.now/CVE-2012-5606.md): Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.9 and 4.5.0 allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2012-5607](https://cve.now/CVE-2012-5607.md): The "Lost Password" reset functionality in ownCloud before 4.0.9 and 4.5.0 does not properly check the security token, which allows remote a (no CVSS)
- [CVE-2012-5608](https://cve.now/CVE-2012-5608.md): Cross-site scripting (XSS) vulnerability in apps/user\_webdavauth/settings.php in ownCloud 4.5.x before 4.5.2 allows remote attackers to inje (no CVSS)
- [CVE-2012-5609](https://cve.now/CVE-2012-5609.md): Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.5.2 allows remote authenticated users to execute arbitrary PHP co (no CVSS)
- [CVE-2012-5610](https://cve.now/CVE-2012-5610.md): Incomplete blacklist vulnerability in lib/filesystem.php in ownCloud before 4.0.9 and 4.5.x before 4.5.2 allows remote authenticated users t (no CVSS)
- [CVE-2012-5622](https://cve.now/CVE-2012-5622.md): Cross-site request forgery (CSRF) vulnerability in the management console (openshift-console/app/controllers/application\_controller.rb) in O (no CVSS)
- [CVE-2012-5195](https://cve.now/CVE-2012-5195.md): Heap-based buffer overflow in the Perl\_repeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before 15 (no CVSS)
- [CVE-2012-6422](https://cve.now/CVE-2012-6422.md): The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-12-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.