2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-2278 | — | — | 1.0% | Jul 13, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in the (1) Self-Service Console and (2) Security Console in EMC RSA ... |
| CVE-2012-0283 | — | — | 1.4% | Jul 13, 2012 | Cross-site scripting (XSS) vulnerability in the tpl_mediaFileList function in inc/template.php in DokuWiki before 2012-0... |
| CVE-2012-2845 | — | — | 3.6% | Jul 13, 2012 | Integer overflow in the jpeg_data_load_data function in jpeg-data.c in libjpeg in exif 0.6.20 allows remote attackers to... |
| CVE-2012-2841 | — | — | 5.7% | Jul 13, 2012 | Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6... |
| CVE-2012-2840 | — | — | 5.0% | Jul 13, 2012 | Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif... |
| CVE-2012-2837 | — | — | 3.9% | Jul 13, 2012 | The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif... |
| CVE-2012-2836 | — | — | 6.2% | Jul 13, 2012 | The exif_data_load_data function in exif-data.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remot... |
| CVE-2012-2814 | — | — | 7.6% | Jul 13, 2012 | Buffer overflow in the exif_entry_format_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.... |
| CVE-2012-2813 | — | — | 3.8% | Jul 13, 2012 | The exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allo... |
| CVE-2012-2812 | — | — | 3.9% | Jul 13, 2012 | The exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows rem... |
| CVE-2012-4000 | — | — | 4.3% | Jul 12, 2012 | Cross-site scripting (XSS) vulnerability in the print_textinputs_var function in editor/dialog/fck_spellerpages/spellerp... |
| CVE-2012-3999 | — | — | 1.4% | Jul 12, 2012 | Cross-site scripting (XSS) vulnerability in admin/login.php in Sticky Notes 0.3.09062012.4 and earlier allows remote att... |
| CVE-2012-3998 | — | — | 2.0% | Jul 12, 2012 | Multiple SQL injection vulnerabilities in Sticky Notes before 0.2.27052012.5 allow remote attackers to execute arbitrary... |
| CVE-2012-3997 | — | — | 1.9% | Jul 12, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in Sticky Notes before 0.2.27052012.5 allow remote attackers to inje... |
| CVE-2012-3382 | — | — | 1.9% | Jul 12, 2012 | Cross-site scripting (XSS) vulnerability in the ProcessRequest function in mcs/class/System.Web/System.Web/HttpForbidden... |
| CVE-2012-3377 | — | — | 3.8% | Jul 12, 2012 | Heap-based buffer overflow in the Ogg_DecodePacket function in the OGG demuxer (modules/demux/ogg.c) in VideoLAN VLC med... |
| CVE-2012-3350 | — | — | 2.9% | Jul 12, 2012 | SQL injection vulnerability in index.php in Webmatic 3.1.1 allows remote attackers to execute arbitrary SQL commands via... |
| CVE-2012-3236 | — | — | 10.7% | Jul 12, 2012 | fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and applic... |
| CVE-2012-2844 | — | — | 2.0% | Jul 12, 2012 | The PDF functionality in Google Chrome before 20.0.1132.57 does not properly handle JavaScript code, which allows remote... |
| CVE-2012-2843 | — | — | 1.7% | Jul 12, 2012 | Use-after-free vulnerability in Google Chrome before 20.0.1132.57 allows remote attackers to cause a denial of service o... |
| CVE-2012-2842 | — | — | 1.5% | Jul 12, 2012 | Use-after-free vulnerability in Google Chrome before 20.0.1132.57 allows remote attackers to cause a denial of service o... |
| CVE-2012-2614 | — | — | 4.1% | Jul 12, 2012 | Buffer overflow in programmer.exe in Lattice Diamond Programmer 1.4.2 allows user-assisted remote attackers to cause a d... |
| CVE-2012-1661 | — | — | 23.8% | Jul 12, 2012 | ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, wh... |
| CVE-2012-3362 | — | — | 0.9% | Jul 12, 2012 | Cross-site request forgery (CSRF) vulnerability in eXtplorer 2.1 RC3 and earlier allows remote attackers to hijack the a... |
| CVE-2012-2653 | — | — | 3.2% | Jul 12, 2012 | arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop supplementary groups, w... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now