2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-2642 | — | — | 1.1% | Jul 7, 2012 | Cross-site scripting (XSS) vulnerability in the MT4i plugin 3.1 beta 4 and earlier for Movable Type allows remote attack... |
| CVE-2012-2386 | — | — | 42.5% | Jul 7, 2012 | Integer overflow in the phar_parse_tarfile function in tar.c in the phar extension in PHP before 5.3.14 and 5.4.x before... |
| CVE-2012-3585 | — | — | 7.7% | Jul 5, 2012 | Heap-based buffer overflow in jpeg_ls.dll in the Jpeg_LS (aka JLS) plugin in the formats plugins in IrfanView PlugIns be... |
| CVE-2012-2018 | — | — | 1.6% | Jul 5, 2012 | Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 8.x, 9.0x, and 9.1x allows remote attackers... |
| CVE-2012-2641 | — | — | 1.1% | Jul 5, 2012 | Cross-site scripting (XSS) vulnerability in Zenphoto before 1.4.3 allows remote attackers to inject arbitrary web script... |
| CVE-2012-2640 | — | — | 1.4% | Jul 5, 2012 | The NEC BIGLOBE Yome Collection application 1.8.3 and earlier for Android allows remote attackers to read the IMEI value... |
| CVE-2012-0303 | — | — | 0.9% | Jul 5, 2012 | Multiple cross-site request forgery (CSRF) vulnerabilities in Brightmail Control Center in Symantec Message Filter 6.3 a... |
| CVE-2012-0302 | — | — | 1.5% | Jul 5, 2012 | Cross-site scripting (XSS) vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attac... |
| CVE-2012-0301 | — | — | 0.8% | Jul 5, 2012 | Session fixation vulnerability in Brightmail Control Center in Symantec Message Filter 6.3 allows remote attackers to hi... |
| CVE-2012-0300 | — | — | 0.8% | Jul 5, 2012 | Brightmail Control Center in Symantec Message Filter 6.3 does not properly restrict establishment of sessions to the lis... |
| CVE-2012-2281 | — | — | 0.7% | Jul 5, 2012 | EMC RSA Access Manager Server 6.x before 6.1 SP4 and RSA Access Manager Agent do not properly validate session tokens af... |
| CVE-2012-2143 | — | — | 5.7% | Jul 5, 2012 | The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other pro... |
| CVE-2012-0410 | — | — | 3.7% | Jul 5, 2012 | Directory traversal vulnerability in WebAccess in Novell GroupWise before 8.03 allows remote attackers to read arbitrary... |
| CVE-2012-3847 | — | — | 1.3% | Jul 5, 2012 | slssvc.exe in Invensys Wonderware SuiteLink in Invensys InTouch 2012 and Wonderware Application Server 2012 allows remot... |
| CVE-2012-3007 | — | — | 2.2% | Jul 5, 2012 | Stack-based buffer overflow in slssvc.exe before 58.x in Invensys Wonderware SuiteLink in the Invensys System Platform s... |
| CVE-2012-2560 | — | — | 2.6% | Jul 5, 2012 | Directory traversal vulnerability in WellinTech KingView 6.53 allows remote attackers to read arbitrary files via a craf... |
| CVE-2012-2559 | — | — | 4.6% | Jul 5, 2012 | WellinTech KingHistorian 3.0 allows remote attackers to execute arbitrary code or cause a denial of service (invalid poi... |
| CVE-2012-2516 | — | — | 39.7% | Jul 5, 2012 | An ActiveX control in KeyHelp.ocx in KeyWorks KeyHelp Module (aka the HTML Help component), as used in GE Intelligent Pl... |
| CVE-2012-2515 | — | — | 27.6% | Jul 5, 2012 | Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHel... |
| CVE-2012-1832 | — | — | 5.9% | Jul 5, 2012 | WellinTech KingView 6.53 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds r... |
| CVE-2012-1831 | — | — | 15.9% | Jul 5, 2012 | Heap-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted p... |
| CVE-2012-1830 | — | — | 7.7% | Jul 5, 2012 | Stack-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted ... |
| CVE-2012-3846 | — | — | 1.2% | Jul 3, 2012 | Cross-site scripting (XSS) vulnerability in index.php in PHP-pastebin 2.1 allows remote attackers to inject arbitrary we... |
| CVE-2012-3845 | — | — | 3.3% | Jul 3, 2012 | Buffer overflow in LAN Messenger 1.2.28 and earlier allows remote attackers to cause a denial of service (crash) via a l... |
| CVE-2012-3844 | — | — | 1.2% | Jul 3, 2012 | Cross-site scripting (XSS) vulnerability in vBulletin 4.1.12 allows remote attackers to inject arbitrary web script or H... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now