2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-2368 | — | — | 1.5% | Aug 13, 2012 | Bytemark Symbiosis before Revision 1322 does not properly validate passwords, which allows remote attackers to gain acce... |
| CVE-2012-4262 | — | — | 2.4% | Aug 13, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in myCare2x allow remote attackers to inject arbitrary web script or... |
| CVE-2012-4261 | — | — | 1.1% | Aug 13, 2012 | SQL injection vulnerability in modules/patient/mycare2x_pat_info.php in myCare2x allows remote attackers to execute arbi... |
| CVE-2012-4260 | — | — | 1.7% | Aug 13, 2012 | Multiple SQL injection vulnerabilities in myCare2x allow remote attackers to execute arbitrary SQL commands via the (1) ... |
| CVE-2012-4259 | — | — | 1.9% | Aug 13, 2012 | Cross-site scripting (XSS) vulnerability in the contacts in (1) XPhone UC Web and the (2) web frontend for XPhone Virtua... |
| CVE-2012-4258 | — | — | 1.1% | Aug 13, 2012 | Multiple SQL injection vulnerabilities in MYRE Real Estate Software (2012 Q2) allow remote attackers to execute arbitrar... |
| CVE-2012-4257 | — | — | 1.5% | Aug 13, 2012 | Yaqas (Yet Another Question & Answer System) 1.0 Alpha 1 allows remote attackers to obtain sensitive information via an ... |
| CVE-2012-4256 | — | — | 1.5% | Aug 13, 2012 | The jNews (com_jnews) component 7.5.1 for Joomla! allows remote attackers to obtain sensitive information via the emails... |
| CVE-2012-4255 | — | — | 1.3% | Aug 13, 2012 | MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information via a direct request to learn/cubemail/refres... |
| CVE-2012-4254 | — | — | 2.4% | Aug 13, 2012 | MySQLDumper 1.24.4 allows remote attackers to obtain sensitive information (Notices) via a direct request to (1) learn/c... |
| CVE-2012-4253 | — | — | 8.5% | Aug 13, 2012 | Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a ... |
| CVE-2012-4252 | — | — | 1.1% | Aug 13, 2012 | Multiple cross-site request forgery (CSRF) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to hijack the au... |
| CVE-2012-4251 | — | — | 1.9% | Aug 13, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to inject arbitrary web... |
| CVE-2012-4250 | — | — | 6.2% | Aug 13, 2012 | Stack-based buffer overflow in the RequestScreenOptimization function in the XProcessControl.ocx ActiveX control in msls... |
| CVE-2012-2327 | — | — | 1.4% | Aug 13, 2012 | MyBB (aka MyBulletinBoard) before 1.6.7 allows remote attackers to obtain sensitive information via a malformed forumrea... |
| CVE-2012-2326 | — | — | 1.0% | Aug 13, 2012 | Cross-site scripting (XSS) vulnerability in the Admin Control Panel (ACP) in MyBB (aka MyBulletinBoard) before 1.6.7 all... |
| CVE-2012-2325 | — | — | 1.0% | Aug 13, 2012 | SQL injection vulnerability in the User Inline Moderation feature in the Admin Control Panel (ACP) in MyBB (aka MyBullet... |
| CVE-2012-2324 | — | — | 1.0% | Aug 13, 2012 | Multiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) before 1.6.7 allow remote administrators to execute... |
| CVE-2012-3476 | — | — | 1.1% | Aug 12, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in (1) application/views/admin/layout.php and (2) themes/default/vie... |
| CVE-2012-3475 | — | — | 1.5% | Aug 12, 2012 | The installer in the Ushahidi Platform before 2.5 omits certain calls to the exit function, which allows remote attacker... |
| CVE-2012-3474 | — | — | 1.8% | Aug 12, 2012 | The comments API in application/libraries/api/MY_Comments_Api_Object.php in the Ushahidi Platform before 2.5 allows remo... |
| CVE-2012-3473 | — | — | 2.3% | Aug 12, 2012 | The (1) reports API and (2) administration feature in the comments API in the Ushahidi Platform before 2.5 do not requir... |
| CVE-2012-3472 | — | — | 1.3% | Aug 12, 2012 | The email API in application/libraries/api/MY_Email_Api_Object.php in the Ushahidi Platform before 2.5 does not require ... |
| CVE-2012-3471 | — | — | 1.8% | Aug 12, 2012 | Multiple SQL injection vulnerabilities in the edit functions in (1) application/controllers/admin/reports.php and (2) ap... |
| CVE-2012-3470 | — | — | 1.2% | Aug 12, 2012 | Multiple SQL injection vulnerabilities in application/libraries/api/MY_Countries_Api_Object.php in the Ushahidi Platform... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now