# CVEs published 2012-11-19

11 CVEs were published on November 19, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2011-0433](https://cve.now/CVE-2011-0433.md): Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other produc (no CVSS)
- [CVE-2011-2486](https://cve.now/CVE-2011-2486.md): nspluginwrapper before 1.4.4 does not properly provide access to NPNVprivateModeBool variable settings, which could prevent Firefox plugins (no CVSS)
- [CVE-2011-5244](https://cve.now/CVE-2011-5244.md): Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, (no CVSS)
- [CVE-2012-4225](https://cve.now/CVE-2012-4225.md): NVIDIA UNIX graphics driver before 295.71 and before 304.32 allows local users to write to arbitrary physical memory locations and gain priv (no CVSS)
- [CVE-2012-4233](https://cve.now/CVE-2012-4233.md): LibreOffice 3.5.x before 3.5.7.2 and 3.6.x before 3.6.1, and OpenOffice.org (OOo), allows remote attackers to cause a denial of service (NUL (no CVSS)
- [CVE-2012-4423](https://cve.now/CVE-2012-4423.md): The virNetServerProgramDispatchCall function in libvirt before 0.10.2 allows remote attackers to cause a denial of service (NULL pointer der (no CVSS)
- [CVE-2012-4541](https://cve.now/CVE-2012-4541.md): Cross-site scripting (XSS) vulnerability in Piwik before 1.9 allows remote attackers to inject arbitrary web script or HTML via unspecified (no CVSS)
- [CVE-2012-5854](https://cve.now/CVE-2012-5854.md): Heap-based buffer overflow in WeeChat 0.3.6 through 0.3.9 allows remote attackers to cause a denial of service (crash or hang) and possibly (no CVSS)
- [CVE-2012-5918](https://cve.now/CVE-2012-5918.md): razorCMS 1.2 allows remote authenticated users to access administrator directories and files by creating and deleting a directory. (no CVSS)
- [CVE-2012-5919](https://cve.now/CVE-2012-5919.md): Multiple cross-site scripting (XSS) vulnerabilities in Havalite 1.0.4 and earlier allow remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2012-4533](https://cve.now/CVE-2012-4533.md): Cross-site scripting (XSS) vulnerability in the "extra" details in the DiffSource.\_get\_row function in lib/viewvc.py in ViewVC 1.0.x before (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-11-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.