# CVEs published 2012-12-28

10 CVEs were published on December 28, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-0738](https://cve.now/CVE-2012-0738.md): IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not validate X.509 certificates during scanning, (no CVSS)
- [CVE-2012-0741](https://cve.now/CVE-2012-0741.md): IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not validate X.509 certificates during use of th (no CVSS)
- [CVE-2012-3870](https://cve.now/CVE-2012-3870.md): Multiple cross-site scripting (XSS) vulnerabilities in objects/createobject.php in Open Constructor 3.12.0 allow remote authenticated users (no CVSS)
- [CVE-2012-3871](https://cve.now/CVE-2012-3871.md): Cross-site scripting (XSS) vulnerability in data/hybrid/i\_hybrid.php in Open Constructor 3.12.0 allows remote authenticated users to inject (no CVSS)
- [CVE-2012-3872](https://cve.now/CVE-2012-3872.md): Multiple cross-site scripting (XSS) vulnerabilities in Open Constructor 3.12.0 allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2012-3873](https://cve.now/CVE-2012-3873.md): Multiple SQL injection vulnerabilities in Open Constructor 3.12.0 allow remote authenticated users to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2012-4528](https://cve.now/CVE-2012-4528.md): The mod\_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver arbitrary POST data to (no CVSS)
- [CVE-2012-4932](https://cve.now/CVE-2012-4932.md): Multiple cross-site scripting (XSS) vulnerabilities in SimpleInvoices before stable-2012-1-CIS3000 allow remote attackers to inject arbitrar (no CVSS)
- [CVE-2012-5445](https://cve.now/CVE-2012-5445.md): The kernel in Cisco Native Unix (CNU) on Cisco Unified IP Phone 7900 series devices (aka TNP phones) with software before 9.3.1-ES10 does no (no CVSS)
- [CVE-2012-6369](https://cve.now/CVE-2012-6369.md): Cross-site scripting (XSS) vulnerability in the Troubleshooting Reporting System feature in AgileBits 1Password 3.9.9 might allow remote att (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-12-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.