# CVEs published 2012-11-20

12 CVEs were published on November 20, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-5674](https://cve.now/CVE-2012-5674.md): Unspecified vulnerability in Adobe ColdFusion 10 before Update 5, when Internet Information Services (IIS) is used, allows attackers to caus (no CVSS)
- [CVE-2012-5703](https://cve.now/CVE-2012-5703.md): The vSphere API in VMware ESXi 4.1 and ESX 4.1 allows remote attackers to cause a denial of service (host daemon crash) via an invalid value (no CVSS)
- [CVE-2011-4612](https://cve.now/CVE-2011-4612.md): icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc (error.log) via a crafted URL. (no CVSS)
- [CVE-2012-3354](https://cve.now/CVE-2012-3354.md): doku.php in DokuWiki, as used in Fedora 16, 17, and 18, when certain PHP error levels are set, allows remote attackers to obtain sensitive i (no CVSS)
- [CVE-2012-4366](https://cve.now/CVE-2012-4366.md): Belkin wireless routers Surf N150 Model F7D1301v1, N900 Model F9K1104v1, N450 Model F9K1105V2, and N300 Model F7D2301v1 generate a predictab (no CVSS)
- [CVE-2012-4510](https://cve.now/CVE-2012-4510.md): cups-pk-helper before 0.2.3 does not properly wrap the (1) cupsGetFile and (2) cupsPutFile function calls, which allows user-assisted remote (no CVSS)
- [CVE-2012-4523](https://cve.now/CVE-2012-4523.md): radsecproxy before 1.6.1 does not properly verify certificates when there are configuration blocks with CA settings that are unrelated to th (no CVSS)
- [CVE-2012-4563](https://cve.now/CVE-2012-4563.md): Cross-site scripting (XSS) vulnerability in Google Web Toolkit (GWT) 2.4 Beta and release candidates before 2.4.0 allows remote attackers to (no CVSS)
- [CVE-2012-4566](https://cve.now/CVE-2012-4566.md): The DTLS support in radsecproxy before 1.6.2 does not properly verify certificates when there are configuration blocks with CA settings that (no CVSS)
- [CVE-2012-5519](https://cve.now/CVE-2012-5519.md): CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrator key in /var/run/cup (no CVSS)
- [CVE-2012-5529](https://cve.now/CVE-2012-5529.md): TraceManager in Firebird 2.5.0 and 2.5.1, when trace is enabled, allows remote authenticated users to cause a denial of service (NULL pointe (no CVSS)
- [CVE-2012-5920](https://cve.now/CVE-2012-5920.md): Cross-site scripting (XSS) vulnerability in Google Web Toolkit (GWT) 2.4 through 2.5 Final, as used in JBoss Operations Network (ON) 3.1.1 a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-11-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.