2012 CVE Vulnerabilities

5,944 CVEs published in 2012.

Filter:UNKNOWNClear
CVE IDSeverityCVSSDescription
CVE-2012-2083——Cross-site scripting (XSS) vulnerability in the fusion_core_preprocess_page function in fusion_core/template.php in the ...
CVE-2012-4739——Multiple cross-site scripting (XSS) vulnerabilities in Barracuda SSL VPN before 2.2.2.203 (2012-07-05) allow remote atta...
CVE-2012-3534——GNU Gatekeeper before 3.1 does not limit the number of connections to the status port, which allows remote attackers to ...
CVE-2012-3533——The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against the...
CVE-2012-2704——The Advertisement module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict access to debug information, which...
CVE-2012-4171——Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x ...
CVE-2012-2872——Cross-site scripting (XSS) vulnerability in an SSL interstitial page in Google Chrome before 21.0.1180.89 allows remote ...
CVE-2012-2871——libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly support a cast of an unsp...
CVE-2012-2870——libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly manage memory, which might a...
CVE-2012-2869——Google Chrome before 21.0.1180.89 does not properly load URLs, which allows remote attackers to cause a denial of servic...
CVE-2012-2868——Race condition in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service or possibly hav...
CVE-2012-2867——The SPDY implementation in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service (appli...
CVE-2012-2866——Google Chrome before 21.0.1180.89 does not properly perform a cast of an unspecified variable during handling of run-in ...
CVE-2012-2865——Google Chrome before 21.0.1180.89 does not properly perform line breaking, which allows remote attackers to cause a deni...
CVE-2012-4245——The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote attackers to execute arbitr...
CVE-2012-3478——rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables i...
CVE-2012-3380——Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local use...
CVE-2012-3379——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-0808. Reason: This candidate is a duplicate of...
CVE-2012-3378——The register_application function in atk-adaptor/bridge.c in GNOME at-spi2-atk 2.5.2 does not seed the random number gen...
CVE-2012-2658——Buffer overflow in the SQLDriverConnect function in unixODBC 2.3.1 allows local users to cause a denial of service (cras...
CVE-2012-2657——Buffer overflow in the SQLDriverConnect function in unixODBC 2.0.10, 2.3.1, and earlier allows local users to cause a de...
CVE-2012-4737——channels/chan_iax2.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 bef...
CVE-2012-4600——Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.14, 3.0.x befor...
CVE-2012-4170——Buffer overflow in Adobe Photoshop CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a crafte...
CVE-2012-4009——The WebView class in the Cybozu Live application 1.0.4 and earlier for Android allows remote attackers to execute arbitr...

Check if your code is affected by 2012 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now