2012 CVE Vulnerabilities

5,944 CVEs published in 2012.

CVE IDSeverityCVSSDescription
CVE-2012-3014——The Management Software application in GarrettCom Magnum MNS-6K before 4.4.0, and 14.x before 14.4.0, has a hardcoded pa...
CVE-2012-2288——Format string vulnerability in the nsrd RPC service in EMC NetWorker 7.6.3 and 7.6.4 before 7.6.4.1, and 8.0 before 8.0....
CVE-2012-0275——Heap-based buffer overflow in Photoshop.exe in Adobe Photoshop CS5 12.x before 12.0.5, CS5.1 12.1.x before 12.1.1, and C...
CVE-2012-4746——Cross-site request forgery (CSRF) vulnerability in accessaccount.cgi in ZTE ZXDSL 831IIV7.5.0a_Z29_OV allows remote atta...
CVE-2012-4745——Cross-site scripting (XSS) vulnerability in admin/login.asp in Acuity CMS 2.6.2 allows remote attackers to inject arbitr...
CVE-2012-4744——Cross-site scripting (XSS) vulnerability in ssearch.php in the Siche search module 0.5 for Zeroboard allows remote attac...
CVE-2012-4743——Multiple SQL injection vulnerabilities in ssearch.php in Siche search module 0.5 for Zeroboard allow remote attackers to...
CVE-2012-4742——The web_node_register function in web.pm in PacketFence before 3.0.2 might allow remote attackers to execute arbitrary c...
CVE-2012-4741——The RADIUS extension in PacketFence before 3.3.0 uses a different user name than is used for authentication for users wi...
CVE-2012-4740——Cross-site scripting (XSS) vulnerability in the captive portal in PacketFence before 3.3.0 allows remote attackers to in...
CVE-2012-2117——Cross-site scripting (XSS) vulnerability in the Gigya - Social optimization module 6.x before 6.x-3.2 for Drupal allows ...
CVE-2012-2116——Cross-site request forgery (CSRF) vulnerability in the Commerce Reorder module before 7.x-1.1 for Drupal allows remote a...
CVE-2012-2114——Stack-based buffer overflow in fprintf in musl before 0.8.8 and earlier allows context-dependent attackers to cause a de...
CVE-2012-2083——Cross-site scripting (XSS) vulnerability in the fusion_core_preprocess_page function in fusion_core/template.php in the ...
CVE-2012-4739——Multiple cross-site scripting (XSS) vulnerabilities in Barracuda SSL VPN before 2.2.2.203 (2012-07-05) allow remote atta...
CVE-2012-3534——GNU Gatekeeper before 3.1 does not limit the number of connections to the status port, which allows remote attackers to ...
CVE-2012-3533——The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVirt 3.1 does not check the server SSL certificate against the...
CVE-2012-2704——The Advertisement module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict access to debug information, which...
CVE-2012-4171——Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x ...
CVE-2012-2872——Cross-site scripting (XSS) vulnerability in an SSL interstitial page in Google Chrome before 21.0.1180.89 allows remote ...
CVE-2012-2871——libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly support a cast of an unsp...
CVE-2012-2870——libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly manage memory, which might a...
CVE-2012-2869——Google Chrome before 21.0.1180.89 does not properly load URLs, which allows remote attackers to cause a denial of servic...
CVE-2012-2868——Race condition in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service or possibly hav...
CVE-2012-2867——The SPDY implementation in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service (appli...

Check if your code is affected by 2012 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now