2012 CVE Vulnerabilities
5,939 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-3524 | — | — | 4.5% | Sep 18, 2012 | libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows... |
| CVE-2012-3034 | — | — | 2.2% | Sep 18, 2012 | WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers t... |
| CVE-2012-3032 | — | — | 2.4% | Sep 18, 2012 | SQL injection vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other prod... |
| CVE-2012-3031 | — | — | 2.1% | Sep 18, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIM... |
| CVE-2012-3030 | — | — | 2.6% | Sep 18, 2012 | WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, stores sensitive informat... |
| CVE-2012-3028 | — | — | 1.0% | Sep 18, 2012 | Cross-site request forgery (CSRF) vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC... |
| CVE-2012-2994 | — | — | 6.3% | Sep 18, 2012 | The CoSoSys Endpoint Protector 4 appliance establishes an EPProot password based entirely on the appliance serial number... |
| CVE-2012-2062 | — | — | 1.8% | Sep 17, 2012 | Open redirect vulnerability in the Redirecting click bouncer module for Drupal allows remote attackers to redirect users... |
| CVE-2012-2061 | — | — | 0.7% | Sep 17, 2012 | Cross-site request forgery (CSRF) vulnerability in the Admin tools module for Drupal allows remote attackers to hijack t... |
| CVE-2012-2060 | — | — | 1.3% | Sep 17, 2012 | Cross-site scripting (XSS) vulnerability in the Admin tools module for Drupal allows remote attackers to inject arbitrar... |
| CVE-2012-2059 | — | — | 1.3% | Sep 17, 2012 | Cross-site scripting (XSS) vulnerability in the ticketyboo News Ticker module for Drupal allows remote attackers to inje... |
| CVE-2012-2058 | — | — | 1.3% | Sep 17, 2012 | The Ubercart Payflow module for Drupal does not use a secure token, which allows remote attackers to forge payments via ... |
| CVE-2012-2057 | — | — | 0.6% | Sep 17, 2012 | Cross-site request forgery (CSRF) vulnerability in the Ubercart Bulk Stock Updater module for Drupal allows remote attac... |
| CVE-2012-2056 | — | — | 0.7% | Sep 17, 2012 | Cross-site request forgery (CSRF) vulnerability in the Content Lock module for Drupal allows remote attackers to hijack ... |
| CVE-2012-1899 | — | — | 1.2% | Sep 17, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in webfolio/admin/users/edit in Webfolio CMS 1.1.4 and earlier allow... |
| CVE-2012-4968 | — | — | 1.9% | Sep 17, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe 2.3.x before 2.3.13 and 2.4.x before 2.4.7 allow rem... |
| CVE-2012-2996 | — | — | 1.7% | Sep 17, 2012 | Cross-site request forgery (CSRF) vulnerability in saveAccountSubTab.imss in Trend Micro InterScan Messaging Security Su... |
| CVE-2012-2995 | — | — | 2.5% | Sep 17, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro InterScan Messaging Security Suite 7.1-Build_Win32_13... |
| CVE-2012-2575 | — | — | 1.3% | Sep 17, 2012 | Cross-site scripting (XSS) vulnerability in NetWin SurgeMail 6.0a4 allows remote attackers to inject arbitrary web scrip... |
| CVE-2012-3924 | — | — | 0.9% | Sep 16, 2012 | The SSLVPN implementation in Cisco IOS 15.1 and 15.2, when DTLS is enabled, does not properly handle certain outbound AC... |
| CVE-2012-3923 | — | — | 0.9% | Sep 16, 2012 | The SSLVPN implementation in Cisco IOS 12.4, 15.0, 15.1, and 15.2, when DTLS is not enabled, does not properly handle ce... |
| CVE-2012-3919 | — | — | 1.2% | Sep 16, 2012 | The Cisco Application Control Engine (ACE) module 3.0 for Cisco Catalyst switches and Cisco routers does not properly mo... |
| CVE-2012-3915 | — | — | 1.2% | Sep 16, 2012 | The DMVPN tunnel implementation in Cisco IOS 15.2 allows remote attackers to cause a denial of service (persistent IKE s... |
| CVE-2012-3908 | — | — | 0.6% | Sep 16, 2012 | Multiple cross-site request forgery (CSRF) vulnerabilities in the ISE Administrator user interface (aka the Apache Tomca... |
| CVE-2012-3901 | — | — | 1.2% | Sep 16, 2012 | The updateTime function in sensorApp on Cisco IPS 4200 series sensors 7.0 and 7.1 allows remote attackers to cause a den... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now