2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-6070 | HIGH | 7.5 | 1.6% | Nov 19, 2019 | Falconpl before 0.9.6.9-git20120606 misuses the libcurl API which may allow remote attackers to interfere with security ... |
| CVE-2012-0843 | MEDIUM | 5.5 | 0.4% | Nov 19, 2019 | uzbl: Information disclosure via world-readable cookies storage file |
| CVE-2012-0824 | CRITICAL | 9.8 | 1.8% | Nov 19, 2019 | gnusound 0.7.5 has format string issue |
| CVE-2012-0842 | MEDIUM | 5.5 | 0.4% | Nov 19, 2019 | surf: cookie jar has read access from other local user |
| CVE-2012-4441 | MEDIUM | 6.1 | 1.9% | Nov 18, 2019 | Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitra... |
| CVE-2012-4440 | MEDIUM | 6.1 | 1.9% | Nov 18, 2019 | Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitra... |
| CVE-2012-4439 | MEDIUM | 6.1 | 1.8% | Nov 18, 2019 | Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitra... |
| CVE-2012-4438 | HIGH | 8.8 | 2.4% | Nov 18, 2019 | Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers with read access and HTTP access to Jenkins mas... |
| CVE-2012-1170 | HIGH | 7.5 | 0.9% | Nov 14, 2019 | Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough |
| CVE-2012-1169 | MEDIUM | 5.3 | 1.8% | Nov 14, 2019 | Moodle before 2.2.2 has Personal information disclosure, when administrative setting users name display is set to first ... |
| CVE-2012-1161 | MEDIUM | 4.3 | 1.4% | Nov 14, 2019 | Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results |
| CVE-2012-1160 | LOW | 2.7 | 1.2% | Nov 14, 2019 | Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can subscribe/unsubscribe via m... |
| CVE-2012-1159 | MEDIUM | 4.3 | 1.4% | Nov 14, 2019 | Moodle before 2.2.2: Overview report allows users to see hidden courses |
| CVE-2012-1158 | MEDIUM | 4.3 | 1.4% | Nov 14, 2019 | Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in export |
| CVE-2012-1157 | MEDIUM | 4.3 | 1.2% | Nov 14, 2019 | Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by defa... |
| CVE-2012-1168 | HIGH | 8.2 | 2.3% | Nov 14, 2019 | Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is re... |
| CVE-2012-1156 | HIGH | 7.5 | 2.1% | Nov 14, 2019 | Moodle before 2.2.2 has users' private files included in course backups |
| CVE-2012-1155 | HIGH | 7.5 | 2.1% | Nov 14, 2019 | Moodle has a database activity export permission issue where the export function of the database activity module exports... |
| CVE-2012-5193 | MEDIUM | 6.1 | 1.8% | Nov 13, 2019 | Multiple cross-site scripting (XSS) vulnerabilities in Bitweaver 2.8.1 and earlier allow remote attackers to inject arbi... |
| CVE-2012-4385 | MEDIUM | 6.5 | 1.6% | Nov 13, 2019 | letodms 3.3.6 has CSRF via change password |
| CVE-2012-4384 | MEDIUM | 6.1 | 1.6% | Nov 13, 2019 | letodms has multiple XSS issues: Reflected XSS in Login Page, Stored XSS in Document Owner/User name, Stored XSS in Cale... |
| CVE-2012-1572 | HIGH | 7.5 | 1.2% | Nov 12, 2019 | OpenStack Keystone: extremely long passwords can crash Keystone by exhausting stack space |
| CVE-2012-1109 | HIGH | 7.5 | 2.1% | Nov 12, 2019 | mwlib 0.13 through 0.13.4 has a denial of service vulnerability when parsing #iferror magic functions |
| CVE-2012-0051 | HIGH | 7.4 | 1.7% | Nov 7, 2019 | Tahoe-LAFS 1.9.0 fails to ensure integrity which allows remote attackers to corrupt mutable files or directories upon re... |
| CVE-2012-0049 | MEDIUM | 4.3 | 1.3% | Nov 7, 2019 | OpenTTD before 1.1.5 contains a Denial of Service (slow read attack) that prevents users from joining the server. |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now