2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-4925 | — | — | 1.2% | Sep 15, 2012 | Multiple SQL injection vulnerabilities in approve.php in Img Pals Photo Host 1.0 allow remote attackers to execute arbit... |
| CVE-2012-4924 | — | — | 36.3% | Sep 15, 2012 | Buffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 all... |
| CVE-2012-4923 | — | — | 1.8% | Sep 15, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in Endian Firewall 2.4 allow remote attackers to inject arbitrary we... |
| CVE-2012-4336 | — | — | 1.6% | Sep 15, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flogr 2.5.6 and earlier allow remote attackers to in... |
| CVE-2012-3458 | — | — | 2.4% | Sep 15, 2012 | Beaker before 1.6.4, when using PyCrypto to encrypt sessions, uses AES in ECB cipher mode, which might allow remote atta... |
| CVE-2012-3233 | — | — | 2.0% | Sep 15, 2012 | Cross-site scripting (XSS) vulnerability in __swift/thirdparty/PHPExcel/PHPExcel/Shared/JAMA/docs/download.php in Kayako... |
| CVE-2012-2275 | — | — | 2.7% | Sep 15, 2012 | Multiple cross-site request forgery (CSRF) vulnerabilities in TestLink 1.9.3 and earlier allow remote attackers to hijac... |
| CVE-2012-4360 | — | — | 1.1% | Sep 15, 2012 | Cross-site scripting (XSS) vulnerability in the mod_pagespeed module 0.10.19.1 through 0.10.22.4 for the Apache HTTP Ser... |
| CVE-2012-4001 | — | — | 0.7% | Sep 15, 2012 | The mod_pagespeed module before 0.10.22.6 for the Apache HTTP Server does not properly verify its host name, which allow... |
| CVE-2012-4817 | — | — | 7.6% | Sep 14, 2012 | The NFSv4 client implementation in IBM AIX 5.3, 6.1, and 7.1, and VIOS before 2.2.1.4-FP-25 SP-02, does not properly han... |
| CVE-2012-4683 | — | — | 1.5% | Sep 14, 2012 | Unspecified vulnerability in bitcoind and Bitcoin-Qt allows attackers to cause a denial of service via unknown vectors, ... |
| CVE-2012-4682 | — | — | 1.5% | Sep 14, 2012 | Unspecified vulnerability in bitcoind and Bitcoin-Qt allows attackers to cause a denial of service via unknown vectors, ... |
| CVE-2012-4013 | — | — | 1.2% | Sep 14, 2012 | The WebView class in the Cybozu KUNAI Browser for Remote Service application beta for Android allows remote attackers to... |
| CVE-2012-4422 | — | — | 1.7% | Sep 14, 2012 | wp-admin/plugins.php in WordPress before 3.4.2, when the multisite feature is enabled, does not check for network-admini... |
| CVE-2012-4421 | — | — | 1.9% | Sep 14, 2012 | The create_post function in wp-includes/class-wp-atom-server.php in WordPress before 3.4.2 does not perform a capability... |
| CVE-2012-4922 | — | — | 2.2% | Sep 14, 2012 | The tor_timegm function in common/util.c in Tor before 0.2.2.39, and 0.2.3.x before 0.2.3.22-rc, does not properly valid... |
| CVE-2012-4419 | — | — | 2.2% | Sep 14, 2012 | The compare_tor_addr_to_addr_policy function in or/policies.c in Tor before 0.2.2.39, and 0.2.3.x before 0.2.3.21-rc, al... |
| CVE-2012-4244 | — | — | 36.8% | Sep 14, 2012 | ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3... |
| CVE-2012-3955 | — | — | 21.7% | Sep 14, 2012 | ISC DHCP 4.1.x before 4.1-ESV-R7 and 4.2.x before 4.2.4-P2 allows remote attackers to cause a denial of service (daemon ... |
| CVE-2012-4909 | — | — | 2.1% | Sep 13, 2012 | Google Chrome before 18.0.1025308 on Android allows remote attackers to obtain cookie information via a crafted applicat... |
| CVE-2012-4908 | — | — | 3.3% | Sep 13, 2012 | Google Chrome before 18.0.1025308 on Android allows remote attackers to bypass the Same Origin Policy and obtain access ... |
| CVE-2012-4907 | — | — | 1.0% | Sep 13, 2012 | Google Chrome before 18.0.1025308 on Android does not properly restrict access from JavaScript code to Android APIs, whi... |
| CVE-2012-4906 | — | — | 3.1% | Sep 13, 2012 | Google Chrome before 18.0.1025308 on Android does not properly restrict access to file: URLs, which allows remote attack... |
| CVE-2012-4905 | — | — | 1.6% | Sep 13, 2012 | Cross-site scripting (XSS) vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inje... |
| CVE-2012-4904 | — | — | 0.7% | Sep 13, 2012 | Cross-application scripting vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inj... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now