# CVEs published 2012-11-15

4 CVEs were published on November 15, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-4951](https://cve.now/CVE-2012-4951.md): Multiple SQL injection vulnerabilities in terminal/paramedit.aspx in VeriFone VeriCentre Web Console before 2.2 build 36 allow remote attack (no CVSS)
- [CVE-2012-4954](https://cve.now/CVE-2012-4954.md): The edit-profile page in Vanilla Forums before 2.1a32 allows remote authenticated users to modify arbitrary profile settings by replacing th (no CVSS)
- [CVE-2012-4955](https://cve.now/CVE-2012-4955.md): Cross-site scripting (XSS) vulnerability in Dell OpenManage Server Administrator (OMSA) before 6.5.0.1, 7.0 before 7.0.0.1, and 7.1 before 7 (no CVSS)
- [CVE-2012-5851](https://cve.now/CVE-2012-5851.md): html/parser/XSSAuditor.cpp in WebCore in WebKit, as used in Google Chrome through 22 and Safari 5.1.7, does not consider all possible output (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-11-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.