2012 CVE Vulnerabilities

5,944 CVEs published in 2012.

CVE IDSeverityCVSSDescription
CVE-2012-2866——Google Chrome before 21.0.1180.89 does not properly perform a cast of an unspecified variable during handling of run-in ...
CVE-2012-2865——Google Chrome before 21.0.1180.89 does not properly perform line breaking, which allows remote attackers to cause a deni...
CVE-2012-4245——The scriptfu network server in GIMP 2.6 does not require authentication, which allows remote attackers to execute arbitr...
CVE-2012-3478——rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables i...
CVE-2012-3380——Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local use...
CVE-2012-3379——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-0808. Reason: This candidate is a duplicate of...
CVE-2012-3378——The register_application function in atk-adaptor/bridge.c in GNOME at-spi2-atk 2.5.2 does not seed the random number gen...
CVE-2012-2658——Buffer overflow in the SQLDriverConnect function in unixODBC 2.3.1 allows local users to cause a denial of service (cras...
CVE-2012-2657——Buffer overflow in the SQLDriverConnect function in unixODBC 2.0.10, 2.3.1, and earlier allows local users to cause a de...
CVE-2012-4737——channels/chan_iax2.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 bef...
CVE-2012-4600——Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.14, 3.0.x befor...
CVE-2012-4170——Buffer overflow in Adobe Photoshop CS6 13.x before 13.0.1 allows remote attackers to execute arbitrary code via a crafte...
CVE-2012-4009——The WebView class in the Cybozu Live application 1.0.4 and earlier for Android allows remote attackers to execute arbitr...
CVE-2012-4008——The Cybozu Live application 1.0.4 and earlier for Android allows remote attackers to execute arbitrary Java methods, and...
CVE-2012-2186——Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7....
CVE-2012-3136——Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow...
CVE-2012-1682——Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow...
CVE-2012-0547——Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier, and ...
CVE-2012-3548——The dissect_drda function in epan/dissectors/packet-drda.c in Wireshark 1.6.x through 1.6.10 and 1.8.x through 1.8.2 all...
CVE-2012-3325——IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.45, 7.0.x before 7.0.0.25, 8.0.x before 8.0.0.5, and 8.5.x Ful...
CVE-2012-4010——Opera before 11.60 allows remote attackers to spoof the address bar via unspecified homograph characters, a different vu...
CVE-2012-3254——Multiple unspecified vulnerabilities in HP iNode Management Center before iNode PC 5.1 E0304 allow remote attackers to e...
CVE-2012-3253——Multiple unspecified vulnerabilities in HP Intelligent Management Center (IMC) before 5.0 E0101P05 allow remote attacker...
CVE-2012-4736——The Device Encryption Client component in Sophos SafeGuard Enterprise 6.0, when a volume-based encryption policy is enab...
CVE-2012-3312——The datasource definition editor in IBM InfoSphere Guardium 8.2 and earlier, when the save-password setting is enabled, ...

Check if your code is affected by 2012 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now