# CVEs published 2012-11-02

8 CVEs were published on November 2, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-0025](https://cve.now/CVE-2012-0025.md): Double free vulnerability in the Free\_All\_Memory function in jpeg/dectile.c in libfpx before 1.3.1-1, as used in the FlashPix PlugIn 4.2.2.0 (no CVSS)
- [CVE-2012-4486](https://cve.now/CVE-2012-4486.md): Cross-site request forgery (CSRF) vulnerability in the Subuser module before 6.x-1.8 for Drupal allows remote attackers to hijack the authen (no CVSS)
- [CVE-2012-4487](https://cve.now/CVE-2012-4487.md): The Subuser module before 6.x-1.8 for Drupal does not properly check "switch subuser" permissions, which allows remote authenticated parent (no CVSS)
- [CVE-2012-4493](https://cve.now/CVE-2012-4493.md): Cross-site scripting (XSS) vulnerability in the administrative interface in the Better Revisions module 7.x-1.x before 7.x-1.1 for Drupal al (no CVSS)
- [CVE-2012-4497](https://cve.now/CVE-2012-4497.md): Cross-site scripting (XSS) vulnerability in the "3 slide gallery" in the Elegant Theme module 7.x-1.x before 7.x-1.1 for Drupal allows remot (no CVSS)
- [CVE-2012-4498](https://cve.now/CVE-2012-4498.md): The Activism module 6.x-2.x before 6.x-2.1 for Drupal does not properly restrict access to the "Campaign" content type, which might allow re (no CVSS)
- [CVE-2012-5416](https://cve.now/CVE-2012-5416.md): Buffer overflow in Cisco Unified MeetingPlace Web Conferencing before 7.1MR1 Patch 1, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 allow (no CVSS)
- [CVE-2012-5417](https://cve.now/CVE-2012-5417.md): Cisco Prime Data Center Network Manager (DCNM) before 6.1(1) does not properly restrict access to certain JBoss MainDeployer functionality, (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-11-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.