# CVEs published 2012-11-24

13 CVEs were published on November 24, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-0959](https://cve.now/CVE-2012-0959.md): Remote Login Service (RLS) 1.0.0 does not properly clear account information when switching users, which might allow physically proximate us (no CVSS)
- [CVE-2012-0960](https://cve.now/CVE-2012-0960.md): Unity integration extension (unity-firefox-extension) before 2.4.1 for Firefox does not properly handle callbacks, which allows remote attac (no CVSS)
- [CVE-2012-2239](https://cve.now/CVE-2012-2239.md): Mahara 1.4.x before 1.4.4 and 1.5.x before 1.5.3 allows remote attackers to read arbitrary files or create TCP connections via an XML extern (no CVSS)
- [CVE-2012-2243](https://cve.now/CVE-2012-2243.md): Cross-site scripting (XSS) vulnerability in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2012-2244](https://cve.now/CVE-2012-2244.md): Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote authenticated administrators to execute arbitrary programs by modifying the p (no CVSS)
- [CVE-2012-2246](https://cve.now/CVE-2012-2246.md): Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbitrary users and bypas (no CVSS)
- [CVE-2012-2247](https://cve.now/CVE-2012-2247.md): Cross-site scripting (XSS) vulnerability in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2012-2253](https://cve.now/CVE-2012-2253.md): Cross-site scripting (XSS) vulnerability in group/members.php in Mahara 1.5.x before 1.5.7 and 1.6.x before 1.6.2 allows remote attackers to (no CVSS)
- [CVE-2012-3433](https://cve.now/CVE-2012-3433.md): Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physic (no CVSS)
- [CVE-2012-4522](https://cve.now/CVE-2012-4522.md): The rb\_get\_path\_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r37163 allows context-dependent attackers (no CVSS)
- [CVE-2012-4538](https://cve.now/CVE-2012-4538.md): The HVMOP\_pagetable\_dying hypercall in Xen 4.0, 4.1, and 4.2 does not properly check the pagetable state when running on shadow pagetables, (no CVSS)
- [CVE-2012-5533](https://cve.now/CVE-2012-5533.md): The http\_request\_split\_value function in request.c in lighttpd before 1.4.32 allows remote attackers to cause a denial of service (infinite (no CVSS)
- [CVE-2012-6037](https://cve.now/CVE-2012-6037.md): Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4, and other versions including 1.2, a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-11-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.