2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-1590 | — | — | 1.4% | Oct 1, 2012 | The forum list in Drupal 7.x before 7.14 does not properly check user permissions for unpublished forum posts, which all... |
| CVE-2012-1588 | — | — | 1.2% | Oct 1, 2012 | Algorithmic complexity vulnerability in the _filter_url function in the text filtering system (modules/filter/filter.mod... |
| CVE-2012-4448 | — | — | 1.1% | Sep 28, 2012 | Cross-site request forgery (CSRF) vulnerability in wp-admin/index.php in WordPress 3.4.2 allows remote attackers to hija... |
| CVE-2012-1833 | — | — | 1.4% | Sep 28, 2012 | VMware SpringSource Grails before 1.3.8, and 2.x before 2.0.2, does not properly restrict data binding, which might allo... |
| CVE-2012-5197 | — | — | 1.7% | Sep 28, 2012 | Multiple unspecified vulnerabilities in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack... |
| CVE-2012-5196 | — | — | 1.8% | Sep 28, 2012 | Multiple buffer overflows in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors. |
| CVE-2012-3493 | — | — | 1.7% | Sep 28, 2012 | The command_give_request_ad function in condor_startd.V6/command.cpp Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 a... |
| CVE-2012-3492 | — | — | 3.2% | Sep 28, 2012 | The filesystem authentication (condor_io/condor_auth_fs.cpp) in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 uses a... |
| CVE-2012-3491 | — | — | 1.8% | Sep 28, 2012 | src/condor_schedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the permiss... |
| CVE-2012-3459 | — | — | 1.6% | Sep 28, 2012 | Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticate... |
| CVE-2012-2735 | — | — | 1.6% | Sep 28, 2012 | Session fixation vulnerability in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MR... |
| CVE-2012-2734 | — | — | 0.9% | Sep 28, 2012 | Multiple cross-site request forgery (CSRF) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messa... |
| CVE-2012-2685 | — | — | 2.2% | Sep 28, 2012 | Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticate... |
| CVE-2012-2684 | — | — | 2.1% | Sep 28, 2012 | Multiple SQL injection vulnerabilities in the get_sample_filters_by_signature function in Cumin before 0.1.5444, as used... |
| CVE-2012-2683 | — | — | 2.1% | Sep 28, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, R... |
| CVE-2012-2681 | — | — | 2.2% | Sep 28, 2012 | Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, uses predictable random nu... |
| CVE-2012-2680 | — | — | 2.3% | Sep 28, 2012 | Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, does not properly restrict... |
| CVE-2012-2145 | — | — | 4.2% | Sep 28, 2012 | Apache Qpid 0.17 and earlier does not properly restrict incoming client connections, which allows remote attackers to ca... |
| CVE-2012-0956 | — | — | 1.2% | Sep 28, 2012 | ubiquity-slideshow-ubuntu before 58.2, during installation, allows remote man-in-the-middle attackers to execute arbitra... |
| CVE-2012-5049 | — | — | 3.4% | Sep 28, 2012 | APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service (infinite l... |
| CVE-2012-5048 | — | — | 6.9% | Sep 28, 2012 | APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service (NULL point... |
| CVE-2012-4912 | — | — | 1.5% | Sep 28, 2012 | Cross-site scripting (XSS) vulnerability in the WebAccess component in Novell GroupWise 8.0 before Support Pack 3 and 20... |
| CVE-2012-4051 | — | — | 1.5% | Sep 28, 2012 | Multiple cross-site request forgery (CSRF) vulnerabilities in editAccount.html in the JAMF Software Server (JSS) interfa... |
| CVE-2012-4017 | — | — | 1.2% | Sep 28, 2012 | The jigbrowser+ application before 1.5.0 for Android does not properly implement the WebView class, which allows remote ... |
| CVE-2012-4016 | — | — | 1.2% | Sep 28, 2012 | The ATOK application before 1.0.4 for Android allows remote attackers to read the learning information file, and obtain ... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now