2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-4249 | — | — | 3.7% | Aug 12, 2012 | The Amazon Lab126 com.lab126.system sendEvent implementation on the Kindle Touch before 5.1.2 allows context-dependent a... |
| CVE-2012-4248 | — | — | 3.5% | Aug 12, 2012 | The Amazon Kindle Touch before 5.1.2 does not properly restrict access to the libkindleplugin.so NPAPI plugin interface,... |
| CVE-2012-4070 | — | — | 1.0% | Aug 12, 2012 | SQL injection vulnerability in system/src/dispatcher.php in Dir2web 3.0 allows remote attackers to execute arbitrary SQL... |
| CVE-2012-4069 | — | — | 1.2% | Aug 12, 2012 | Dir2web 3.0 stores sensitive information under the web root with insufficient access control, which allows remote attack... |
| CVE-2012-2584 | — | — | 3.2% | Aug 12, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbitr... |
| CVE-2012-2969 | — | — | 3.5% | Aug 12, 2012 | Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to bypass intended restrictions on filena... |
| CVE-2012-2968 | — | — | 3.5% | Aug 12, 2012 | Directory traversal vulnerability in Caucho Quercus, as distributed in Resin before 4.0.29, allows remote attackers to c... |
| CVE-2012-2967 | — | — | 1.6% | Aug 12, 2012 | Caucho Quercus, as distributed in Resin before 4.0.29, does not properly implement the == (equals sign equals sign) oper... |
| CVE-2012-2966 | — | — | 1.6% | Aug 12, 2012 | Caucho Quercus, as distributed in Resin before 4.0.29, overwrites entries in the SERVER superglobal array on the basis o... |
| CVE-2012-2965 | — | — | 1.6% | Aug 12, 2012 | Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of v... |
| CVE-2012-2964 | — | — | 1.8% | Aug 12, 2012 | The BreakingPoint Storm appliance before 3.0 requires cleartext credentials for establishing a session from a GUI admini... |
| CVE-2012-2963 | — | — | 1.8% | Aug 12, 2012 | The administrative interface in the embedded web server on the BreakingPoint Storm appliance before 3.0 does not require... |
| CVE-2012-2602 | — | — | 6.0% | Aug 12, 2012 | Multiple cross-site request forgery (CSRF) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before ... |
| CVE-2012-2577 | — | — | 10.2% | Aug 12, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) before 10.3.1 ... |
| CVE-2012-4247 | — | — | 2.1% | Aug 12, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in lists/admin/index.php in phpList before 2.10.19 allow remote atta... |
| CVE-2012-4246 | — | — | 1.9% | Aug 12, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in lists/admin/index.php in phpList before 2.10.19 allow remote atta... |
| CVE-2012-4035 | — | — | 3.1% | Aug 12, 2012 | The new_password page in PBBoard 2.1.4 allows remote attackers to change the password of arbitrary user accounts via the... |
| CVE-2012-4034 | — | — | 2.5% | Aug 12, 2012 | Multiple SQL injection vulnerabilities in PBBoard 2.1.4 allow remote attackers to execute arbitrary SQL commands via the... |
| CVE-2012-3953 | — | — | 1.1% | Aug 12, 2012 | SQL injection vulnerability in admin/index.php in phpList before 2.10.19 allows remote administrators to execute arbitra... |
| CVE-2012-3952 | — | — | 1.9% | Aug 12, 2012 | Cross-site scripting (XSS) vulnerability in admin/index.php in phpList before 2.10.19 allows remote attackers to inject ... |
| CVE-2012-3457 | — | — | 0.3% | Aug 12, 2012 | PNP4Nagios 0.6 through 0.6.16 uses world-readable permissions for process_perfdata.cfg, which allows local users to obta... |
| CVE-2012-3132 | — | — | 1.8% | Aug 10, 2012 | SQL injection vulnerability in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 all... |
| CVE-2012-4235 | — | — | 1.4% | Aug 10, 2012 | The RSGallery2 (com_rsgallery2) component before 3.2.0 for Joomla! 2.5.x does not place index.html files in image direct... |
| CVE-2012-4071 | — | — | 1.2% | Aug 10, 2012 | Cross-site scripting (XSS) vulnerability in the comments module in the RSGallery2 (com_rsgallery2) component before 2.3.... |
| CVE-2012-3554 | — | — | 1.2% | Aug 10, 2012 | SQL injection vulnerability in the RSGallery2 (com_rsgallery2) component before 2.3.0 for Joomla! 1.5.x, and before 3.2.... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now