2012 CVE Vulnerabilities
5,939 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-4180 | — | — | 9.3% | Oct 10, 2012 | Heap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhitespace function in Mozilla Firefox before 16.0, Fire... |
| CVE-2012-4179 | — | — | 4.7% | Oct 10, 2012 | Use-after-free vulnerability in the nsHTMLCSSUtils::CreateCSSPropertyTxn function in Mozilla Firefox before 16.0, Firefo... |
| CVE-2012-3995 | — | — | 5.0% | Oct 10, 2012 | The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16... |
| CVE-2012-3994 | — | — | 2.4% | Oct 10, 2012 | Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8... |
| CVE-2012-3993 | — | — | 42.6% | Oct 10, 2012 | The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbi... |
| CVE-2012-3992 | — | — | 2.5% | Oct 10, 2012 | Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8... |
| CVE-2012-3991 | — | — | 3.1% | Oct 10, 2012 | Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8... |
| CVE-2012-3990 | — | — | 5.2% | Oct 10, 2012 | Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x be... |
| CVE-2012-3989 | — | — | 3.5% | Oct 10, 2012 | Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly perform a cast of an uns... |
| CVE-2012-3988 | — | — | 5.2% | Oct 10, 2012 | Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Th... |
| CVE-2012-3987 | — | — | 1.5% | Oct 10, 2012 | Mozilla Firefox before 16.0 on Android assigns chrome privileges to Reader Mode pages, which allows user-assisted remote... |
| CVE-2012-3986 | — | — | 2.5% | Oct 10, 2012 | Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8... |
| CVE-2012-3985 | — | — | 1.9% | Oct 10, 2012 | Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly implement the HTML5 Same... |
| CVE-2012-3984 | — | — | 2.2% | Oct 10, 2012 | Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away f... |
| CVE-2012-3983 | — | — | 5.3% | Oct 10, 2012 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Thunderbird before 16.0, and ... |
| CVE-2012-3982 | — | — | 4.7% | Oct 10, 2012 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.... |
| CVE-2012-5353 | — | — | 2.2% | Oct 9, 2012 | Eduserv OpenAthens SP 2.0 for Java allows remote attackers to forge messages and bypass authentication via a SAML assert... |
| CVE-2012-5352 | — | — | 2.5% | Oct 9, 2012 | Java Open Single Sign-On Project Home (JOSSO) allows remote attackers to forge messages and bypass authentication via a ... |
| CVE-2012-5351 | — | — | 5.1% | Oct 9, 2012 | Apache Axis2 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signa... |
| CVE-2012-4453 | — | — | 0.4% | Oct 9, 2012 | dracut.sh in dracut, as used in Red Hat Enterprise Linux 6, Fedora 16 and 17, and possibly other products, creates initr... |
| CVE-2012-4452 | — | — | 0.4% | Oct 9, 2012 | MySQL 5.0.88, and possibly other versions and platforms, allows local users to bypass certain privilege checks by callin... |
| CVE-2012-4418 | — | — | 6.0% | Oct 9, 2012 | Apache Axis2 allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack." |
| CVE-2012-4399 | HIGH | 7.5 | 12.1% | Oct 9, 2012 | The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via X... |
| CVE-2012-4003 | — | — | 1.8% | Oct 9, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in GLPI-PROJECT GLPI before 0.83.3 allow remote attackers to inject ... |
| CVE-2012-4002 | — | — | 1.0% | Oct 9, 2012 | Cross-site request forgery (CSRF) vulnerability in GLPI-PROJECT GLPI before 0.83.3 allows remote attackers to hijack the... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now