# CVEs published 2012-11-20

12 CVEs were published on November 20, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-5674](https://cve.now/CVE-2012-5674.md): Unspecified vulnerability in Adobe ColdFusion 10 before Update 5, when Internet Information Services (IIS) is used, allows attackers to… (no CVSS)
- [CVE-2012-5703](https://cve.now/CVE-2012-5703.md): The vSphere API in VMware ESXi 4.1 and ESX 4.1 allows remote attackers to cause a denial of service (host daemon crash) via an invalid… (no CVSS)
- [CVE-2011-4612](https://cve.now/CVE-2011-4612.md): icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc (error.log) via a crafted URL. (no CVSS)
- [CVE-2012-3354](https://cve.now/CVE-2012-3354.md): doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set, allows remote attackers to obtain sensitive… (no CVSS)
- [CVE-2012-4366](https://cve.now/CVE-2012-4366.md): Belkin wireless routers Surf N150 Model F7D1301v1, N900 Model F9K1104v1, N450 Model F9K1105V2, and N300 Model F7D2301v1 generate a… (no CVSS)
- [CVE-2012-4510](https://cve.now/CVE-2012-4510.md): cups-pk-helper before 0.2.3 does not properly wrap the (1) cupsGetFile and (2) cupsPutFile function calls, which allows user-assisted… (no CVSS)
- [CVE-2012-4523](https://cve.now/CVE-2012-4523.md): radsecproxy before 1.6.1 does not properly verify certificates when there are configuration blocks with CA settings that are unrelated to… (no CVSS)
- [CVE-2012-4563](https://cve.now/CVE-2012-4563.md): Cross-site scripting (XSS) vulnerability in Google Web Toolkit (GWT) 2.4 Beta and release candidates before 2.4.0 allows remote attackers… (no CVSS)
- [CVE-2012-4566](https://cve.now/CVE-2012-4566.md): The DTLS support in radsecproxy before 1.6.2 does not properly verify certificates when there are configuration blocks with CA settings… (no CVSS)
- [CVE-2012-5519](https://cve.now/CVE-2012-5519.md): CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in… (no CVSS)
- [CVE-2012-5529](https://cve.now/CVE-2012-5529.md): TraceManager in Firebird 2.5.0 and 2.5.1, when trace is enabled, allows remote authenticated users to cause a denial of service (NULL… (no CVSS)
- [CVE-2012-5920](https://cve.now/CVE-2012-5920.md): Cross-site scripting (XSS) vulnerability in Google Web Toolkit (GWT) 2.4 through 2.5 Final, as used in JBoss Operations Network (ON) 3.1.1… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2012-11-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.