2012 CVE Vulnerabilities

5,944 CVEs published in 2012.

CVE IDSeverityCVSSDescription
CVE-2012-2979HIGH7.5FreeBSD NSD before 3.2.13 allows remote attackers to crash a NSD child server process (SIGSEGV) and cause a denial of se...
CVE-2012-6125CRITICAL9.8Chicken before 4.8.0 is susceptible to algorithmic complexity attacks related to hash table collisions.
CVE-2012-6124MEDIUM5.3A casting error in Chicken before 4.8.0 on 64-bit platform caused the random number generator to return a constant value...
CVE-2012-6123MEDIUM6.5Chicken before 4.8.0 does not properly handle NUL bytes in certain strings, which allows an attacker to conduct "poisone...
CVE-2012-6122HIGH7.5Buffer overflow in the thread scheduler in Chicken before 4.8.0.1 allows attackers to cause a denial of service (crash) ...
CVE-2012-0694CRITICAL9.8SugarCRM CE <= 6.3.1 contains scripts that use "unserialize()" with user controlled input which allows remote attackers ...
CVE-2012-2945HIGH7.5Hadoop 1.0.3 contains a symlink vulnerability.
CVE-2012-1187CRITICAL9.8Bitlbee does not drop extra group privileges correctly in unix.c
CVE-2012-0046HIGH7.5mediawiki allows deleted text to be exposed
CVE-2012-5577HIGH7.5Python keyring lib before 0.10 created keyring files with world-readable permissions.
CVE-2012-6719——The sharebar plugin before 1.2.2 for WordPress has SQL injection.
CVE-2012-6718——The sharebar plugin before 1.2.2 for WordPress has XSS, a different issue than CVE-2013-3491.
CVE-2012-6717——The redirection plugin before 2.2.12 for WordPress has XSS, a different issue than CVE-2011-4562.
CVE-2012-6716——The events-manager plugin before 5.1.7 for WordPress has XSS via JSON call links.
CVE-2012-6714——The count-per-day plugin before 3.2.3 for WordPress has XSS via search words.
CVE-2012-6715——The formbuilder plugin before 0.9.1 for WordPress has XSS via a Referer header.
CVE-2012-6713——The job-manager plugin before 0.7.19 for WordPress has multiple XSS issues.
CVE-2012-6712CRITICAL9.8In the Linux kernel before 3.4, a buffer overflow occurs in drivers/net/wireless/iwlwifi/iwl-agn-sta.c, which will cause...
CVE-2012-6711HIGH7A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set...
CVE-2012-6652——Directory traversal vulnerability in pageflipbook.php script from index.php in Page Flip Book plugin for WordPress (wppa...
CVE-2012-6710——ext_find_user in eXtplorer through 2.1.2 allows remote attackers to bypass authentication via a password[]= (aka an empt...
CVE-2012-0721——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was...
CVE-2012-0433LOW3.3The install-chef-suse.sh script shipped with crowbar before 2012-10-02 is creating files containing confidential data wi...
CVE-2012-5628——gofer before 0.68 uses world-writable permissions for /var/lib/gofer/journal/watchdog, which allows local users to cause...
CVE-2012-3536——Two XSS vulnerabilities were fixed in message list and view in the Hupa Webmail application from the Apache James projec...

Check if your code is affected by 2012 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now