2012 CVE Vulnerabilities

5,944 CVEs published in 2012.

CVE IDSeverityCVSSDescription
CVE-2012-3590——WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of servi...
CVE-2012-3589——WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of servi...
CVE-2012-1520——WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of servi...
CVE-2012-0683——WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of servi...
CVE-2012-0682——WebKit, as used in Apple Safari before 6.0, allows remote attackers to execute arbitrary code or cause a denial of servi...
CVE-2012-4053——Cross-site request forgery (CSRF) vulnerability in eZOE flash player in eZ Publish 4.1 through 4.6 allows remote attacke...
CVE-2012-3697——WebKit in Apple Safari before 6.0 does not properly handle file: URLs, which allows remote attackers to bypass intended ...
CVE-2012-3696——CRLF injection vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to inject arbitrary HTTP heade...
CVE-2012-3695——Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to inject arbitrar...
CVE-2012-3694——WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attac...
CVE-2012-3693——Incomplete blacklist vulnerability in WebKit in Apple Safari before 6.0 allows remote attackers to spoof domain names in...
CVE-2012-3691——WebKit in Apple Safari before 6.0 does not properly handle Cascading Style Sheets (CSS) property values, which allows re...
CVE-2012-3690——WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attac...
CVE-2012-3689——WebKit in Apple Safari before 6.0 does not properly handle drag-and-drop events, which allows user-assisted remote attac...
CVE-2012-3650——WebKit in Apple Safari before 6.0 accesses uninitialized memory locations during the rendering of SVG images, which allo...
CVE-2012-2760——mod_auth_openid before 0.7 for Apache uses world-readable permissions for /tmp/mod_auth_openid.db, which allows local us...
CVE-2012-2677——Integer overflow in the ordered_malloc function in boost/pool/pool.hpp in Boost Pool before 3.9 makes it easier for cont...
CVE-2012-2676——Multiple integer overflows in the (1) malloc and (2) calloc functions in Hoard before 3.9 make it easier for context-dep...
CVE-2012-2675——Multiple integer overflows in the (1) CallMalloc (malloc) and (2) nedpcalloc (calloc) functions in nedmalloc (nedmalloc....
CVE-2012-2674——Multiple integer overflows in the (1) chk_malloc, (2) leak_malloc, and (3) leak_memalign functions in libc/bionic/malloc...
CVE-2012-2673——Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_mal...
CVE-2012-0680——Apple Safari before 6.0 does not properly handle the autocomplete attribute of a password input element, which allows re...
CVE-2012-0679——Apple Safari before 6.0 allows remote attackers to read arbitrary files via a feed:// URL.
CVE-2012-0678——Cross-site scripting (XSS) vulnerability in Apple Safari before 6.0 allows remote attackers to inject arbitrary web scri...
CVE-2012-3954——Multiple memory leaks in ISC DHCP 4.1.x and 4.2.x before 4.2.4-P1 and 4.1-ESV before 4.1-ESV-R6 allow remote attackers t...

Check if your code is affected by 2012 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now