# CVEs published 2012-12-21 20 CVEs were published on December 21, 2012: 0 critical, 0 high. Days are UTC. - [CVE-2012-5181](https://cve.now/CVE-2012-5181.md): Cross-site scripting (XSS) vulnerability in concrete5 Japanese 5.5.1 through 5.5.2.1 and concrete5 English 5.5.0 through 5.6.0.2 allows remo (no CVSS, concrete5/concrete5) - [CVE-2012-6324](https://cve.now/CVE-2012-6324.md): Directory traversal vulnerability in VMware vCenter Server Appliance (vCSA) 5.0 before Update 2 and 5.1 before Patch 1 allows remote authent (no CVSS) - [CVE-2012-6325](https://cve.now/CVE-2012-6325.md): VMware vCenter Server Appliance (vCSA) 5.0 before Update 2 does not properly parse XML documents, which allows remote authenticated users to (no CVSS) - [CVE-2012-0957](https://cve.now/CVE-2012-0957.md): The override\_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kern (no CVSS) - [CVE-2012-3002](https://cve.now/CVE-2012-3002.md): The web interface on (1) Foscam and (2) Wansview IP cameras allows remote attackers to bypass authentication, and perform administrative fun (no CVSS) - [CVE-2012-4444](https://cve.now/CVE-2012-4444.md): The ip6\_frag\_queue function in net/ipv6/reassembly.c in the Linux kernel before 2.6.36 allows remote attackers to bypass intended network re (no CVSS) - [CVE-2012-4508](https://cve.now/CVE-2012-4508.md): Race condition in fs/ext4/extents.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from a deleted file (no CVSS) - [CVE-2012-4565](https://cve.now/CVE-2012-4565.md): The tcp\_illinois\_info function in net/ipv4/tcp\_illinois.c in the Linux kernel before 3.4.19, when the net.ipv4.tcp\_congestion\_control illino (no CVSS) - [CVE-2012-4859](https://cve.now/CVE-2012-4859.md): Unspecified vulnerability in IBM Tivoli Storage Manager for Space Management (aka TSM HSM) before 6.2.5.0 and 6.3.x before 6.3.1.0 allows lo (no CVSS) - [CVE-2012-5517](https://cve.now/CVE-2012-5517.md): The online\_pages function in mm/memory\_hotplug.c in the Linux kernel before 3.6 allows local users to cause a denial of service (NULL pointe (no CVSS) - [CVE-2012-5954](https://cve.now/CVE-2012-5954.md): Unspecified vulnerability in IBM Tivoli Storage Manager for Space Management (aka TSM HSM) before 6.2.5.0 and 6.3.x before 6.3.1.0 allows re (no CVSS) - [CVE-2010-2387](https://cve.now/CVE-2010-2387.md): vicious-extensions/ve-misc.c in GNOME Display Manager (gdm) 2.20.x before 2.20.11, when GDM debug is enabled, logs the user password when it (no CVSS) - [CVE-2011-2728](https://cve.now/CVE-2011-2728.md): The bsd\_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service (crash (no CVSS) - [CVE-2012-0841](https://cve.now/CVE-2012-0841.md): libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-depen (no CVSS) - [CVE-2012-0882](https://cve.now/CVE-2012-0882.md): Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows (no CVSS) - [CVE-2012-1699](https://cve.now/CVE-2012-1699.md): The ProcSetEventMask function in difs/events.c in the xfs font server for X.Org X11R6 through X11R6.6 and XFree86 before 3.3.3 calls the Sen (no CVSS) - [CVE-2012-1712](https://cve.now/CVE-2012-1712.md): Directory traversal vulnerability in the Liferay component in Oracle Sun GlassFish Web Space Server before 10.0 Update 7 Patch 2 has unknown (no CVSS) - [CVE-2012-1714](https://cve.now/CVE-2012-1714.md): Unspecified vulnerability in a TList 6 ActiveX control in Oracle Hyperion Financial Management 11.1.1.4 and 11.1.2.1.104 allows remote attac (no CVSS) - [CVE-2012-3133](https://cve.now/CVE-2012-3133.md): Buffer overflow in the DataDirect ODBC driver, as used in Oracle Hyperion Interactive Reporting 11.1.2.1 and 11.1.2.2, Essbase Server 11.1.2 (no CVSS) - [CVE-2012-3482](https://cve.now/CVE-2012-3482.md): Fetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM servers to (1) cause a denial of service (c (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2012-12-21 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.