2012 CVE Vulnerabilities

5,944 CVEs published in 2012.

CVE IDSeverityCVSSDescription
CVE-2012-3241——The VMware Broker in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 does not properly authenticate SOAP requests, which allows ...
CVE-2012-3240——The Walrus service in Eucalyptus 2.0.3 and 3.0.x before 3.0.2 allows remote attackers to gain administrator privileges v...
CVE-2012-1571MEDIUM6.5file before 5.11 and libmagic allow remote attackers to cause a denial of service (crash) via a crafted Composite Docume...
CVE-2012-0282——Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash...
CVE-2012-0277——Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash...
CVE-2012-0276——Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (applicat...
CVE-2012-0801——lib/formslib.php in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 does not properly handle multiple instances of a fo...
CVE-2012-0800——The form-autocompletion functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 makes it ...
CVE-2012-0799——Moodle 2.0.x before 2.0.7 and 2.1.x before 2.1.4, when an anonymous front-page forum is enabled, allows remote attackers...
CVE-2012-0798——The self-enrolment functionality in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 allows remote authenticated users t...
CVE-2012-0797——The webservices functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows remote aut...
CVE-2012-0796——class.phpmailer.php in the PHPMailer library, as used in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2....
CVE-2012-0795——Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 does not validate e-mail addr...
CVE-2012-0794——The rc4encrypt function in lib/moodlelib.php in Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and ...
CVE-2012-0793——Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows remote attackers to vi...
CVE-2012-0792——mod/forum/user.php in Moodle 1.9.x before 1.9.16 allows remote authenticated users to obtain the names and other details...
CVE-2012-4028——Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass...
CVE-2012-4027——Directory traversal vulnerability in Tridium Niagara AX Framework allows remote attackers to read files outside of the i...
CVE-2012-2282——EMC Celerra Network Server 6.x before 6.0.61.0, VNX 7.x before 7.0.53.2, and VNXe 2.0 and 2.1 before 2.1.3.19077 (aka MR...
CVE-2012-4026——The Johnson Controls Pegasys P2000 server with software before 3.11 allows remote attackers to trigger false alerts via ...
CVE-2012-2645——The Yahoo! Japan Yahoo! Browser application 1.2.0 and earlier for Android does not properly implement the WebView class,...
CVE-2012-2607——The Johnson Controls CK721-A controller with firmware before SSM4388_03.1.0.14_BB allows remote attackers to perform arb...
CVE-2012-2021——Multiple cross-site scripting (XSS) vulnerabilities in HP AssetManager 5.20, 5.21, 5.22, and 9.30 allow remote authentic...
CVE-2012-2280——EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID Appliance 3.0 before SP4 P14 do not properly use frame...
CVE-2012-2279——Open redirect vulnerability in the Security Console in EMC RSA Authentication Manager 7.1 before SP4 P14 and RSA SecurID...

Check if your code is affected by 2012 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now