# CVEs published 2012-11-18

21 CVEs were published on November 18, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-4417](https://cve.now/CVE-2012-4417.md): GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary files via a symlink attack on temporary fi (no CVSS)
- [CVE-2012-4433](https://cve.now/CVE-2012-4433.md): Multiple integer overflows in operations/external/ppm-load.c in GEGL (Generic Graphics Library) 0.2.0 allow remote attackers to cause a deni (no CVSS)
- [CVE-2012-4520](https://cve.now/CVE-2012-4520.md): The django.http.HttpRequest.get\_host function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and di (no CVSS, django)
- [CVE-2012-4552](https://cve.now/CVE-2012-4552.md): Stack-based buffer overflow in the error function in ssg/ssgParser.cxx in PLIB 1.8.5 allows remote attackers to execute arbitrary code via a (no CVSS)
- [CVE-2012-4935](https://cve.now/CVE-2012-4935.md): Cross-site request forgery (CSRF) vulnerability in the web interface in Pattern Insight 2.3 allows remote attackers to hijack the authentica (no CVSS)
- [CVE-2012-4936](https://cve.now/CVE-2012-4936.md): The web interface in Pattern Insight 2.3 allows remote attackers to conduct clickjacking attacks via a FRAME element. (no CVSS)
- [CVE-2012-4937](https://cve.now/CVE-2012-4937.md): Session fixation vulnerability in the web interface in Pattern Insight 2.3 allows remote attackers to hijack web sessions via a jsession\_id (no CVSS)
- [CVE-2012-4938](https://cve.now/CVE-2012-4938.md): Cross-site scripting (XSS) vulnerability in the web interface in Pattern Insight 2.3 allows remote authenticated administrators to inject ar (no CVSS)
- [CVE-2012-4941](https://cve.now/CVE-2012-4941.md): Multiple SQL injection vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attackers to execute arbitr (no CVSS)
- [CVE-2012-4942](https://cve.now/CVE-2012-4942.md): Multiple cross-site scripting (XSS) vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attackers to i (no CVSS)
- [CVE-2012-4943](https://cve.now/CVE-2012-4943.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attacke (no CVSS)
- [CVE-2012-4944](https://cve.now/CVE-2012-4944.md): Multiple unrestricted file upload vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attackers to exe (no CVSS)
- [CVE-2012-4945](https://cve.now/CVE-2012-4945.md): Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attackers to execute arbitrary commands via unspecified vectors, rela (no CVSS)
- [CVE-2012-4946](https://cve.now/CVE-2012-4946.md): Agile FleetCommander and FleetCommander Kiosk before 4.08 use an XOR format for password encryption, which makes it easier for context-depen (no CVSS)
- [CVE-2012-4947](https://cve.now/CVE-2012-4947.md): Agile FleetCommander and FleetCommander Kiosk before 4.08 store database credentials in cleartext, which allows remote attackers to obtain s (no CVSS)
- [CVE-2012-4950](https://cve.now/CVE-2012-4950.md): Cross-site scripting (XSS) vulnerability in the Keyword Search page in the web interface in Pattern Insight 2.3 allows remote attackers to i (no CVSS)
- [CVE-2012-4575](https://cve.now/CVE-2012-4575.md): The add\_database function in objects.c in the pgbouncer pooler 1.5.2 for PostgreSQL allows remote attackers to cause a denial of service (da (no CVSS)
- [CVE-2012-4956](https://cve.now/CVE-2012-4956.md): Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to execute arbitrary code via a large numbe (no CVSS)
- [CVE-2012-4957](https://cve.now/CVE-2012-4957.md): Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /F (no CVSS)
- [CVE-2012-4958](https://cve.now/CVE-2012-4958.md): Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /F (no CVSS)
- [CVE-2012-4959](https://cve.now/CVE-2012-4959.md): Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 13 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-11-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.