2012 CVE Vulnerabilities

5,944 CVEs published in 2012.

CVE IDSeverityCVSSDescription
CVE-2012-6345HIGH7.5Novell ZENworks Configuration Management before 11.2.4 allows obtaining sensitive trace information.
CVE-2012-6344MEDIUM6.1Novell ZENworks Configuration Management before 11.2.4 allows XSS.
CVE-2012-6451CRITICAL9.8Lorex LNC116 and LNC104 IP Cameras have a Remote Authentication Bypass Vulnerability
CVE-2012-6302HIGH7.8Soapbox through 0.3.1: Sandbox bypass - runs a second instance of Soapbox within a sandboxed Soapbox.
CVE-2012-6663HIGH7.5General Electric D20ME devices are not properly configured and reveal plaintext passwords.
CVE-2012-6649CRITICAL9.8WordPress WP GPX Maps Plugin 1.1.21 allows remote attackers to execute arbitrary PHP code via improper file upload.
CVE-2012-5389HIGH7.5NULL Pointer Dereference in PowerTCP WebServer for ActiveX 1.9.2 and earlier allows remote attackers to cause a denial o...
CVE-2012-5340HIGH7.8SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corru...
CVE-2012-4606HIGH7.8Citrix XenServer 4.1, 6.0, 5.6 SP2, 5.6 Feature Pack 1, 5.6 Common Criteria, 5.6, 5.5, 5.0, and 5.0 Update 3 contains a ...
CVE-2012-5626HIGH7.5EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3....
CVE-2012-6083HIGH7.5Freeciv before 2.3.3 allows remote attackers to cause a denial of service via a crafted packet.
CVE-2012-5867CRITICAL9.8HT Editor 2.0.20 has a Remote Stack Buffer Overflow Vulnerability
CVE-2012-5699CRITICAL9.8BabyGekko before 1.2.4 allows PHP file inclusion.
CVE-2012-5698HIGH8.8BabyGekko before 1.2.4 has SQL injection.
CVE-2012-4981HIGH8.8Toshiba ConfigFree 8.0.38 has a CF7 File Remote Command Execution Vulnerability
CVE-2012-4900MEDIUM5.5Corel WordPerfect Office X6 16.0.0.388 has a DoS Vulnerability via untrusted pointer dereference
CVE-2012-4863MEDIUM6.5IBM WebSphere MQ 7.1 and 7.5: Queue manager has a DoS vulnerability
CVE-2012-2087CRITICAL9.8ISPConfig 3.0.4.3: the "Add new Webdav user" can chmod and chown entire server from client interface.
CVE-2012-4919CRITICAL9.8Gallery Plugin1.4 for WordPress has a Remote File Include Vulnerability
CVE-2012-5190CRITICAL9.8Prizm Content Connect 5.1 has an Arbitrary File Upload Vulnerability
CVE-2012-1326HIGH7.4Cisco IronPort Web Security Appliance up to and including 7.5 does not validate the basic constraints of the certificate...
CVE-2012-1316MEDIUM5.9Cisco IronPort Web Security Appliance does not check for certificate revocation which could lead to MITM attacks
CVE-2012-0070HIGH7.5spamdyke prior to 4.2.1: STARTTLS reveals plaintext
CVE-2012-1563HIGH7.5Joomla! before 2.5.3 allows Admin Account Creation.
CVE-2012-1562HIGH7.5Joomla! core before 2.5.3 allows unauthorized password change.

Check if your code is affected by 2012 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now