2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-2146 | — | — | 1.7% | Aug 26, 2012 | Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector (IV), which makes it easier f... |
| CVE-2012-2104 | — | — | 5.1% | Aug 26, 2012 | cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might ... |
| CVE-2012-2103 | — | — | 0.3% | Aug 26, 2012 | The qmailscan plugin for Munin 1.4.5 allows local users to overwrite arbitrary files via a symlink attack on temporary f... |
| CVE-2012-1921 | — | — | 1.0% | Aug 26, 2012 | Cross-site request forgery (CSRF) vulnerability in goform/admin/formWlEncrypt in Sitecom WLM-2501 allows remote attacker... |
| CVE-2012-1296 | — | — | 1.3% | Aug 26, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2... |
| CVE-2012-1177 | — | — | 1.9% | Aug 26, 2012 | libgdata before 0.10.2 and 0.11.x before 0.11.1 does not validate SSL certificates, which allows remote attackers to obt... |
| CVE-2012-1176 | — | — | 2.7% | Aug 26, 2012 | Buffer overflow in the fribidi_utf8_to_unicode function in PyFriBidi before 0.11.0 allows remote attackers to cause a de... |
| CVE-2012-1175 | — | — | 4.3% | Aug 26, 2012 | Integer overflow in the GnashImage::size method in libbase/GnashImage.h in GNU Gnash 0.8.10 allows remote attackers to c... |
| CVE-2012-4677 | — | — | 0.2% | Aug 26, 2012 | Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info.plist file to control th... |
| CVE-2012-4676 | — | — | 0.2% | Aug 26, 2012 | The errorExitIfAttackViaString function in Tunnelblick 3.3beta20 and earlier allows local users to delete arbitrary file... |
| CVE-2012-3487 | — | — | 0.1% | Aug 26, 2012 | Race condition in Tunnelblick 3.3beta20 and earlier allows local users to kill unintended processes by waiting for a spe... |
| CVE-2012-3486 | — | — | 0.3% | Aug 26, 2012 | Tunnelblick 3.3beta20 and earlier allows local users to gain privileges via an OpenVPN configuration file that specifies... |
| CVE-2012-3485 | — | — | 3.8% | Aug 26, 2012 | Tunnelblick 3.3beta20 and earlier relies on argv[0] to determine the name of an appropriate (1) kernel module pathname o... |
| CVE-2012-3484 | — | — | 0.2% | Aug 26, 2012 | Tunnelblick 3.3beta20 and earlier relies on a test for specific ownership and permissions to determine whether a program... |
| CVE-2012-3483 | — | — | 0.3% | Aug 26, 2012 | Race condition in the runScript function in Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by r... |
| CVE-2012-4675 | — | — | 1.2% | Aug 26, 2012 | Cross-site scripting (XSS) vulnerability in PluXml 5.1.6 allows remote attackers to inject arbitrary web script or HTML ... |
| CVE-2012-4674 | — | — | 1.2% | Aug 26, 2012 | PluXml before 5.1.6 allows remote attackers to obtain the installation path via the PHPSESSID. |
| CVE-2012-2227 | — | — | 9.8% | Aug 26, 2012 | Directory traversal vulnerability in update/index.php in PluXml before 5.1.6 allows remote attackers to include and exec... |
| CVE-2012-4673 | — | — | 1.3% | Aug 26, 2012 | SQL injection vulnerability in application/controllers/invoice.php in NeoInvoice might allow remote attackers to execute... |
| CVE-2012-3519 | — | — | 2.4% | Aug 26, 2012 | routerlist.c in Tor before 0.2.2.38 uses a different amount of time for relay-list iteration depending on which relay is... |
| CVE-2012-3518 | — | — | 2.8% | Aug 26, 2012 | The networkstatus_parse_vote_from_string function in routerparse.c in Tor before 0.2.2.38 does not properly handle an in... |
| CVE-2012-3517 | — | — | 2.8% | Aug 26, 2012 | Use-after-free vulnerability in dns.c in Tor before 0.2.2.38 might allow remote attackers to cause a denial of service (... |
| CVE-2012-3477 | — | — | 1.2% | Aug 26, 2012 | SQL injection vulnerability in signup_check.php in NeoInvoice allows remote attackers to execute arbitrary SQL commands ... |
| CVE-2012-2289 | — | — | 5.4% | Aug 26, 2012 | EMC ApplicationXtender Desktop before 6.5 SP2 and ApplicationXtender Web Access .NET before 6.5 SP2 allow remote attacke... |
| CVE-2012-4672 | — | — | 0.8% | Aug 25, 2012 | Apple iChat Server does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMP... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now