2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-2064 | — | — | 2.0% | Sep 5, 2012 | Cross-site scripting (XSS) vulnerability in theme/views_lang_switch.theme.inc in the Views Language Switcher module befo... |
| CVE-2012-2063 | — | — | 2.3% | Sep 5, 2012 | The Slidebox module before 7.x-1.4 for Drupal does not properly check permissions, which allows remote attackers to obta... |
| CVE-2012-2109 | — | — | 3.5% | Sep 4, 2012 | SQL injection vulnerability in wp-load.php in the BuddyPress plugin 1.5.x before 1.5.5 of WordPress allows remote attack... |
| CVE-2012-1614 | — | — | 8.7% | Sep 4, 2012 | Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via (1) a direct request ... |
| CVE-2012-1613 | — | — | 2.2% | Sep 4, 2012 | Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote aut... |
| CVE-2012-1608 | — | — | 2.3% | Sep 4, 2012 | The t3lib_div::RemoveXSS API method in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, and 6... |
| CVE-2012-1607 | — | — | 3.1% | Sep 4, 2012 | The Command Line Interface (CLI) script in TYPO3 4.4.0 through 4.4.13, 4.5.0 through 4.5.13, 4.6.0 through 4.6.6, 4.7, a... |
| CVE-2012-1606 | — | — | 1.6% | Sep 4, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in the Backend component in TYPO3 4.4.0 through 4.4.13, 4.5.0 throug... |
| CVE-2012-1605 | — | — | 2.4% | Sep 4, 2012 | The Extbase Framework in TYPO3 4.6.x through 4.6.6, 4.7, and 6.0 unserializes untrusted data, which allows remote attack... |
| CVE-2012-4747 | — | — | 1.7% | Sep 4, 2012 | Bugzilla 2.x and 3.x through 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x and 4.2.x before 4.2.3, and 4.3.x before 4.3.3 ... |
| CVE-2012-3981 | — | — | 1.7% | Sep 4, 2012 | Auth/Verify/LDAP.pm in Bugzilla 2.x and 3.x before 3.6.11, 3.7.x and 4.0.x before 4.0.8, 4.1.x and 4.2.x before 4.2.3, a... |
| CVE-2012-3582 | — | — | 0.6% | Sep 4, 2012 | Symantec PGP Universal Server 3.2.x before 3.2.1 MP2 does not properly manage sessions that include key search requests,... |
| CVE-2012-3014 | — | — | 0.4% | Sep 4, 2012 | The Management Software application in GarrettCom Magnum MNS-6K before 4.4.0, and 14.x before 14.4.0, has a hardcoded pa... |
| CVE-2012-2288 | — | — | 33.1% | Sep 4, 2012 | Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0.... |
| CVE-2012-0275 | — | — | 9.0% | Sep 4, 2012 | Heap-based buffer overflow in Photoshop.exe in Adobe Photoshop CS5 12.x before 12.0.5, CS5.1 12.1.x before 12.1.1, and C... |
| CVE-2012-4746 | — | — | 1.1% | Aug 31, 2012 | Cross-site request forgery (CSRF) vulnerability in accessaccount.cgi in ZTE ZXDSL 831IIV7.5.0a_Z29_OV allows remote atta... |
| CVE-2012-4745 | — | — | 1.6% | Aug 31, 2012 | Cross-site scripting (XSS) vulnerability in admin/login.asp in Acuity CMS 2.6.2 allows remote attackers to inject arbitr... |
| CVE-2012-4744 | — | — | 1.2% | Aug 31, 2012 | Cross-site scripting (XSS) vulnerability in ssearch.php in the Siche search module 0.5 for Zeroboard allows remote attac... |
| CVE-2012-4743 | — | — | 1.3% | Aug 31, 2012 | Multiple SQL injection vulnerabilities in ssearch.php in Siche search module 0.5 for Zeroboard allow remote attackers to... |
| CVE-2012-4742 | — | — | 2.7% | Aug 31, 2012 | The web_node_register function in web.pm in PacketFence before 3.0.2 might allow remote attackers to execute arbitrary c... |
| CVE-2012-4741 | — | — | 1.4% | Aug 31, 2012 | The RADIUS extension in PacketFence before 3.3.0 uses a different user name than is used for authentication for users wi... |
| CVE-2012-4740 | — | — | 1.2% | Aug 31, 2012 | Cross-site scripting (XSS) vulnerability in the captive portal in PacketFence before 3.3.0 allows remote attackers to in... |
| CVE-2012-2117 | — | — | 1.3% | Aug 31, 2012 | Cross-site scripting (XSS) vulnerability in the Gigya - Social optimization module 6.x before 6.x-3.2 for Drupal allows ... |
| CVE-2012-2116 | — | — | 1.0% | Aug 31, 2012 | Cross-site request forgery (CSRF) vulnerability in the Commerce Reorder module before 7.x-1.1 for Drupal allows remote a... |
| CVE-2012-2114 | — | — | 2.4% | Aug 31, 2012 | Stack-based buffer overflow in fprintf in musl before 0.8.8 and earlier allows context-dependent attackers to cause a de... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now