2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-2351 | — | — | 2.1% | Jul 12, 2012 | The default configuration of the auth/saml plugin in Mahara before 1.4.2 sets the "Match username attribute to Remote us... |
| CVE-2012-1174 | — | — | 0.3% | Jul 12, 2012 | The rm_rf_children function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows... |
| CVE-2012-1163 | — | — | 2.6% | Jul 12, 2012 | Integer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to execute arbitrary... |
| CVE-2012-1162 | — | — | 4.0% | Jul 12, 2012 | Heap-based buffer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to cause a... |
| CVE-2012-1037 | — | — | 1.3% | Jul 12, 2012 | PHP remote file inclusion vulnerability in front/popup.php in GLPI 0.78 through 0.80.61 allows remote authenticated user... |
| CVE-2012-0215 | — | — | 2.0% | Jul 12, 2012 | model/modelstorage.py in the Tryton application framework (trytond) before 2.4.0 for Python does not properly restrict a... |
| CVE-2012-3996 | — | — | 4.6% | Jul 12, 2012 | TikiWiki CMS/Groupware 8.3 and earlier allows remote attackers to obtain the installation path via a direct request to (... |
| CVE-2012-3881 | — | — | 1.1% | Jul 12, 2012 | Multiple SQL injection vulnerabilities in RTG 0.7.4 and RTG2 0.9.2 allow remote attackers to execute arbitrary SQL comma... |
| CVE-2012-3805 | — | — | 1.6% | Jul 12, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in the getAllPassedParams function in system/functions.php in Kajona... |
| CVE-2012-3399 | — | — | 65.3% | Jul 12, 2012 | Config/diff.php in Basilic 1.5.14 allows remote attackers to execute arbitrary commands via shell metacharacters in the ... |
| CVE-2012-3376 | — | — | 2.7% | Jul 12, 2012 | DataNodes in Apache Hadoop 2.0.0 alpha does not check the BlockTokens of clients when Kerberos is enabled and the DataNo... |
| CVE-2012-2763 | — | — | 81.7% | Jul 12, 2012 | Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and p... |
| CVE-2012-1620 | — | — | 0.5% | Jul 12, 2012 | slock 0.9 does not properly handle the XRaiseWindow event when the screen is locked, which might allow physically proxim... |
| CVE-2012-0911 | CRITICAL | 9.8 | 63.0% | Jul 12, 2012 | TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted... |
| CVE-2012-3076 | — | — | 2.2% | Jul 12, 2012 | The administrative web interface on Cisco TelePresence Recording Server before 1.8.0 allows remote authenticated users t... |
| CVE-2012-3075 | — | — | 2.2% | Jul 12, 2012 | The administrative web interface on Cisco TelePresence Immersive Endpoint Devices before 1.7.4 allows remote authenticat... |
| CVE-2012-3074 | — | — | 1.2% | Jul 12, 2012 | An unspecified API on Cisco TelePresence Immersive Endpoint Devices before 1.9.1 allows remote attackers to execute arbi... |
| CVE-2012-3073 | — | — | 1.8% | Jul 12, 2012 | The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and... |
| CVE-2012-2486 | — | — | 1.7% | Jul 12, 2012 | The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresen... |
| CVE-2012-3890 | — | — | 2.0% | Jul 11, 2012 | The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (heap memory corruption) or... |
| CVE-2012-3889 | — | — | 2.0% | Jul 11, 2012 | The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (memory corruption) or poss... |
| CVE-2012-2020 | — | — | 64.7% | Jul 11, 2012 | Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via u... |
| CVE-2012-2019 | — | — | 64.7% | Jul 11, 2012 | Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via u... |
| CVE-2012-1894 | — | — | 1.6% | Jul 10, 2012 | Microsoft Office for Mac 2011 uses world-writable permissions for the "Applications/Microsoft Office 2011/" directory an... |
| CVE-2012-1893 | — | — | 1.8% | Jul 10, 2012 | win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, W... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now