# CVEs published 2012-12-11

4 CVEs were published on December 11, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-4349](https://cve.now/CVE-2012-4349.md): Unquoted Windows search path vulnerability in Symantec Network Access Control (SNAC) 12.1 before RU2 allows local users to gain privileges v (no CVSS)
- [CVE-2012-5956](https://cve.now/CVE-2012-5956.md): Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine AssetExplorer 5.6 before service pack 5614 allow remote attackers to inj (no CVSS)
- [CVE-2012-6312](https://cve.now/CVE-2012-6312.md): Cross-site scripting (XSS) vulnerability in the Video Lead Form plugin for WordPress allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2012-6313](https://cve.now/CVE-2012-6313.md): simple-gmail-login.php in the Simple Gmail Login plugin before 1.1.4 for WordPress allows remote attackers to obtain sensitive information v (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-12-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.