# CVEs published 2012-12-31 10 CVEs were published on December 31, 2012: 0 critical, 0 high. Days are UTC. - [CVE-2011-5251](https://cve.now/CVE-2011-5251.md): Open redirect vulnerability in forum/login.php in vBulletin 4.1.3 and earlier allows remote attackers to redirect users to arbitrary web sit (no CVSS) - [CVE-2012-6371](https://cve.now/CVE-2012-6371.md): The WPA2 implementation on the Belkin N900 F9K1104v1 router establishes a WPS PIN based on 6 digits of the LAN/WLAN MAC address, which makes (no CVSS) - [CVE-2012-4688](https://cve.now/CVE-2012-4688.md): I-GEN opLYNX Central Authentication Bypass (no CVSS, i-GEN Solutions opLYNX) - [CVE-2012-5642](https://cve.now/CVE-2012-5642.md): server/action.py in Fail2ban before 0.8.8 does not properly handle the content of the matches tag, which might allow remote attackers to tri (no CVSS) - [CVE-2012-6334](https://cve.now/CVE-2012-6334.md): The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices does not properly implement Location APIs, wh (no CVSS) - [CVE-2012-6335](https://cve.now/CVE-2012-6335.md): The Anti-theft service in AVG AntiVirus for Android allows physically proximate attackers to provide arbitrary location data via a "commonly (no CVSS) - [CVE-2012-6336](https://cve.now/CVE-2012-6336.md): The Missing Device feature in Lookout allows physically proximate attackers to provide arbitrary location data via a "commonly available sim (no CVSS) - [CVE-2012-6337](https://cve.now/CVE-2012-6337.md): The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices shows the activation of remote tracking, whic (no CVSS) - [CVE-2012-6339](https://cve.now/CVE-2012-6339.md): Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cerberus FTP Server before 5.0.6.0 allow (1) remo (no CVSS) - [CVE-2012-6453](https://cve.now/CVE-2012-6453.md): Cross-site scripting (XSS) vulnerability in the RSS Reader extension before 0.2.6 for MediaWiki allows remote attackers to inject arbitrary (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2012-12-31 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.