2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-2999 | — | — | 1.2% | Oct 4, 2012 | Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in Cerberus FTP Server before 5.0.5.0 al... |
| CVE-2012-5300 | — | — | 1.3% | Oct 4, 2012 | SQL injection vulnerability in art_catalogo.php in MyStore Xpress Tienda Virtual 2.0 allows remote attackers to execute ... |
| CVE-2012-5299 | — | — | 1.7% | Oct 4, 2012 | Mavili Guestbook, as released in November 2007, allows remote attackers to edit, delete, and approve arbitrary messages ... |
| CVE-2012-5298 | — | — | 1.5% | Oct 4, 2012 | Mavili Guestbook, as released in November 2007, stores guestbook.mdb under the web root with insufficient access control... |
| CVE-2012-5297 | — | — | 1.3% | Oct 4, 2012 | SQL injection vulnerability in edit.asp in Mavili Guestbook, as released in November 2007, allows remote attackers to ex... |
| CVE-2012-5296 | — | — | 1.2% | Oct 4, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in Mavili Guestbook, as released in November 2007, allow remote atta... |
| CVE-2012-5295 | — | — | 1.6% | Oct 4, 2012 | Cross-site scripting (XSS) vulnerability in login.cfm in FuseTalk Forums 3.2 and earlier allows remote attackers to inje... |
| CVE-2012-5294 | — | — | 1.1% | Oct 4, 2012 | SQL injection vulnerability in art_detalle.php in MyStore Xpress Tienda Virtual allows remote attackers to execute arbit... |
| CVE-2012-5293 | — | — | 2.7% | Oct 4, 2012 | Multiple PHP remote file inclusion vulnerabilities in SAPID CMS 1.2.3 Stable allow remote attackers to execute arbitrary... |
| CVE-2012-5292 | — | — | 1.1% | Oct 4, 2012 | Multiple SQL injection vulnerabilities in Atar2b CMS 4.0.1 allow remote attackers to execute arbitrary SQL commands via ... |
| CVE-2012-5291 | — | — | 1.1% | Oct 4, 2012 | SQL injection vulnerability in team.php in Posse Softball Director CMS allows remote attackers to execute arbitrary SQL ... |
| CVE-2012-5290 | — | — | 1.2% | Oct 4, 2012 | Multiple SQL injection vulnerabilities in EasyWebRealEstate allow remote attackers to execute arbitrary SQL commands via... |
| CVE-2012-5289 | — | — | 1.3% | Oct 4, 2012 | Multiple SQL injection vulnerabilities in Plogger 1.0 RC1 allow remote attackers to execute arbitrary SQL commands via t... |
| CVE-2012-5288 | — | — | 1.1% | Oct 4, 2012 | SQL injection vulnerability in page.php in phpMyDirectory 1.3.3 allows remote attackers to execute arbitrary SQL command... |
| CVE-2012-3819 | — | — | 2.3% | Oct 4, 2012 | Stack consumption vulnerability in dartwebserver.dll 1.9 and earlier, as used in Dart PowerTCP WebServer for ActiveX and... |
| CVE-2012-3267 | — | — | 4.2% | Oct 4, 2012 | Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.20 allows remote attackers to obtain sensitive informati... |
| CVE-2012-3511 | — | — | 0.4% | Oct 4, 2012 | Multiple race conditions in the madvise_remove function in mm/madvise.c in the Linux kernel before 3.4.5 allow local use... |
| CVE-2012-5239 | — | — | — | Oct 3, 2012 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-3548. Reason: This candidate is a reservation ... |
| CVE-2012-3489 | MEDIUM | 6.5 | 3.1% | Oct 3, 2012 | The xml_parse function in the libxml2 support in the core server component in PostgreSQL 8.3 before 8.3.20, 8.4 before 8... |
| CVE-2012-3488 | — | — | 3.3% | Oct 3, 2012 | The libxslt support in contrib/xml2 in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before... |
| CVE-2012-3552 | MEDIUM | 5.9 | 2.9% | Oct 3, 2012 | Race condition in the IP implementation in the Linux kernel before 3.0 might allow remote attackers to cause a denial of... |
| CVE-2012-3520 | — | — | 0.4% | Oct 3, 2012 | The Netlink implementation in the Linux kernel before 3.2.30 does not properly handle messages that lack SCM_CREDENTIALS... |
| CVE-2012-3510 | — | — | 0.5% | Oct 3, 2012 | Use-after-free vulnerability in the xacct_add_tsk function in kernel/tsacct.c in the Linux kernel before 2.6.19 allows l... |
| CVE-2012-3430 | — | — | 1.0% | Oct 3, 2012 | The rds_recvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure mem... |
| CVE-2012-3412 | — | — | 6.2% | Oct 3, 2012 | The sfc (aka Solarflare Solarstorm) driver in the Linux kernel before 3.2.30 allows remote attackers to cause a denial o... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now