2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-2360 | — | — | 0.8% | Jul 21, 2012 | Cross-site scripting (XSS) vulnerability in the Wiki subsystem in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2... |
| CVE-2012-2359 | — | — | 1.1% | Jul 21, 2012 | admin/roles/override.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenti... |
| CVE-2012-2358 | — | — | 1.6% | Jul 21, 2012 | Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to bypass an act... |
| CVE-2012-2357 | — | — | 1.3% | Jul 21, 2012 | The Multi-Authentication feature in the Central Authentication Service (CAS) functionality in auth/cas/cas_form.html in ... |
| CVE-2012-2356 | — | — | 1.4% | Jul 21, 2012 | The question-bank functionality in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to... |
| CVE-2012-2355 | — | — | 1.4% | Jul 21, 2012 | Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass question:use* capability re... |
| CVE-2012-2354 | — | — | 1.0% | Jul 21, 2012 | Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass the moodle/site:readallmess... |
| CVE-2012-2353 | — | — | 1.4% | Jul 21, 2012 | Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to obtain sensitive user information ... |
| CVE-2012-3365 | — | — | 3.0% | Jul 20, 2012 | The SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir protection mechanism vi... |
| CVE-2012-3008 | — | — | 4.7% | Jul 20, 2012 | Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote authenticated users to execute ... |
| CVE-2012-2955 | — | — | 2.5% | Jul 20, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in IBM Lotus Protector for Mail... |
| CVE-2012-2688 | — | — | 10.5% | Jul 20, 2012 | Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.... |
| CVE-2012-4025 | — | — | 3.9% | Jul 19, 2012 | Integer overflow in the queue_init function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote atta... |
| CVE-2012-4024 | — | — | 4.0% | Jul 19, 2012 | Stack-based buffer overflow in the get_component function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allo... |
| CVE-2012-2974 | — | — | 2.6% | Jul 19, 2012 | The web interface on the SMC SMC8024L2 switch allows remote attackers to bypass authentication and obtain administrative... |
| CVE-2012-0284 | — | — | 36.3% | Jul 19, 2012 | Stack-based buffer overflow in the SetSource method in the Cisco Linksys PlayerPT ActiveX control 1.0.0.15 in PlayerPT.o... |
| CVE-2012-3358 | — | — | 7.7% | Jul 18, 2012 | Multiple heap-based buffer overflows in the j2k_read_sot function in j2k.c in OpenJPEG 1.5 allow remote attackers to cau... |
| CVE-2012-2655 | — | — | 2.9% | Jul 18, 2012 | PostgreSQL 8.3.x before 8.3.19, 8.4.x before 8.4.12, 9.0.x before 9.0.8, and 9.1.x before 9.1.4 allows remote authentica... |
| CVE-2012-0868 | — | — | 2.6% | Jul 18, 2012 | CRLF injection vulnerability in pg_dump in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and ... |
| CVE-2012-0867 | — | — | 2.3% | Jul 18, 2012 | PostgreSQL 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 truncates the common name to only 32 characte... |
| CVE-2012-0866 | — | — | 3.6% | Jul 18, 2012 | CREATE TRIGGER in PostgreSQL 8.3.x before 8.3.18, 8.4.x before 8.4.11, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 does n... |
| CVE-2012-4033 | — | — | 2.6% | Jul 18, 2012 | Multiple unspecified vulnerabilities in the Zingiri Web Shop plugin before 2.4.0 for WordPress have unknown impact and a... |
| CVE-2012-2303 | — | — | 2.0% | Jul 18, 2012 | The Spaces module 6.x-3.x before 6.x-3.4 for Drupal does not enforce permissions on non-object pages, which allows remot... |
| CVE-2012-2140 | — | — | 4.5% | Jul 18, 2012 | The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a (... |
| CVE-2012-2139 | — | — | 4.9% | Jul 18, 2012 | Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem before 2.4.4 for... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now