2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-1654 | — | — | 1.9% | Sep 18, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in the Data module 6.x-1.x before 6.x-1.0 and 7.x-1.x before 7.x-1.0... |
| CVE-2012-1901 | — | — | 1.1% | Sep 18, 2012 | Multiple cross-site request forgery (CSRF) vulnerabilities in FlexCMS 3.2.1 and earlier allow remote attackers to (1) hi... |
| CVE-2012-1184 | — | — | 16.4% | Sep 18, 2012 | Stack-based buffer overflow in the ast_parse_digest function in main/utils.c in Asterisk 1.8.x before 1.8.10.1 and 10.x ... |
| CVE-2012-1183 | — | — | 3.7% | Sep 18, 2012 | Stack-based buffer overflow in the milliwatt_generate function in the Miliwatt application in Asterisk 1.4.x before 1.4.... |
| CVE-2012-4425 | — | — | 1.1% | Sep 18, 2012 | libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users to... |
| CVE-2012-4413 | — | — | 1.9% | Sep 18, 2012 | OpenStack Keystone 2012.1.3 does not invalidate existing tokens when granting or revoking roles, which allows remote aut... |
| CVE-2012-4405 | — | — | 7.5% | Sep 18, 2012 | Multiple integer underflows in the icmLut_allocate function in International Color Consortium (ICC) Format library (iccl... |
| CVE-2012-3547 | — | — | 5.7% | Sep 18, 2012 | Stack-based buffer overflow in the cbtls_verify function in FreeRADIUS 2.1.10 through 2.1.12, when using TLS-based EAP m... |
| CVE-2012-3524 | — | — | 4.5% | Sep 18, 2012 | libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows... |
| CVE-2012-3034 | — | — | 2.2% | Sep 18, 2012 | WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, allows remote attackers t... |
| CVE-2012-3032 | — | — | 2.4% | Sep 18, 2012 | SQL injection vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other prod... |
| CVE-2012-3031 | — | — | 2.1% | Sep 18, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIM... |
| CVE-2012-3030 | — | — | 2.6% | Sep 18, 2012 | WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC PCS7 and other products, stores sensitive informat... |
| CVE-2012-3028 | — | — | 1.0% | Sep 18, 2012 | Cross-site request forgery (CSRF) vulnerability in WebNavigator in Siemens WinCC 7.0 SP3 and earlier, as used in SIMATIC... |
| CVE-2012-4969 | HIGH | 8.1 | 81.7% | Sep 18, 2012 | Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 al... |
| CVE-2012-2994 | — | — | 6.3% | Sep 18, 2012 | The CoSoSys Endpoint Protector 4 appliance establishes an EPProot password based entirely on the appliance serial number... |
| CVE-2012-2993 | MEDIUM | 5.9 | 3.6% | Sep 18, 2012 | Microsoft Windows Phone 7 does not verify the domain name in the subject's Common Name (CN) field of an X.509 certificat... |
| CVE-2012-2062 | — | — | 1.8% | Sep 17, 2012 | Open redirect vulnerability in the Redirecting click bouncer module for Drupal allows remote attackers to redirect users... |
| CVE-2012-2061 | — | — | 0.7% | Sep 17, 2012 | Cross-site request forgery (CSRF) vulnerability in the Admin tools module for Drupal allows remote attackers to hijack t... |
| CVE-2012-2060 | — | — | 1.3% | Sep 17, 2012 | Cross-site scripting (XSS) vulnerability in the Admin tools module for Drupal allows remote attackers to inject arbitrar... |
| CVE-2012-2059 | — | — | 1.3% | Sep 17, 2012 | Cross-site scripting (XSS) vulnerability in the ticketyboo News Ticker module for Drupal allows remote attackers to inje... |
| CVE-2012-2058 | — | — | 1.3% | Sep 17, 2012 | The Ubercart Payflow module for Drupal does not use a secure token, which allows remote attackers to forge payments via ... |
| CVE-2012-2057 | — | — | 0.6% | Sep 17, 2012 | Cross-site request forgery (CSRF) vulnerability in the Ubercart Bulk Stock Updater module for Drupal allows remote attac... |
| CVE-2012-2056 | — | — | 0.7% | Sep 17, 2012 | Cross-site request forgery (CSRF) vulnerability in the Content Lock module for Drupal allows remote attackers to hijack ... |
| CVE-2012-1899 | — | — | 1.2% | Sep 17, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in webfolio/admin/users/edit in Webfolio CMS 1.1.4 and earlier allow... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now