2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-3843 | — | — | 1.2% | Jul 3, 2012 | Cross-site scripting (XSS) vulnerability in the registration page in e107, probably 1.0.1, allows remote attackers to in... |
| CVE-2012-3842 | — | — | 1.2% | Jul 3, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in CMD_DOMAIN in JBMC Software DirectAdmin 1.403 allow remote authen... |
| CVE-2012-3841 | — | — | 3.3% | Jul 3, 2012 | Untrusted search path vulnerability in KMPlayer 3.2.0.19 allows local users to execute arbitrary code and conduct DLL hi... |
| CVE-2012-3840 | — | — | 1.6% | Jul 3, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in index.php/users/form/user_id in MyClientBase 0.12 allow remote at... |
| CVE-2012-3839 | — | — | 2.4% | Jul 3, 2012 | Multiple SQL injection vulnerabilities in application/core/MY_Model.php in MyClientBase 0.12 allow remote attackers to e... |
| CVE-2012-3838 | — | — | 2.8% | Jul 3, 2012 | Gekko before 1.2.0 allows remote attackers to obtain the installation path via a direct request to (1) admin/templates/b... |
| CVE-2012-3837 | — | — | 1.6% | Jul 3, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in apps/users/registration.template.php in Baby Gekko 1.2.0 and earl... |
| CVE-2012-3836 | — | — | 1.6% | Jul 3, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in Baby Gekko before 1.2.0 allow remote attackers to inject arbitrar... |
| CVE-2012-3835 | — | — | 2.2% | Jul 3, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 3.... |
| CVE-2012-3834 | — | — | 1.4% | Jul 3, 2012 | SQL injection vulnerability in forensics/base_qry_main.php in AlienVault Open Source Security Information Management (OS... |
| CVE-2012-3833 | — | — | 1.2% | Jul 3, 2012 | Cross-site scripting (XSS) vulnerability in the default index page in admin/ in Quick.CMS 4.0 allows remote attackers to... |
| CVE-2012-3832 | — | — | 1.5% | Jul 3, 2012 | Cross-site scripting (XSS) vulnerability in decoda/Decoda.php in Decoda before 3.2 allows remote attackers to inject arb... |
| CVE-2012-3831 | — | — | 2.5% | Jul 3, 2012 | Cross-site scripting (XSS) vulnerability in decoda/templates/video.php in Decoda before 3.3.1 allows remote attackers to... |
| CVE-2012-3830 | — | — | 3.8% | Jul 3, 2012 | Cross-site scripting (XSS) vulnerability in decoda/templates/video.php in Decoda before 3.3.3 allows remote attackers to... |
| CVE-2012-3829 | — | — | 1.3% | Jul 3, 2012 | Joomla! 2.5.3 allows remote attackers to obtain the installation path via the Host HTTP Header. |
| CVE-2012-3828 | — | — | 1.8% | Jul 3, 2012 | Cross-site scripting (XSS) vulnerability in Joomla! 2.5.3 allows remote attackers to inject arbitrary web script or HTML... |
| CVE-2012-2314 | — | — | 0.4% | Jul 3, 2012 | The bootloader configuration module (pyanaconda/bootloader.py) in Anaconda uses 755 permissions for /etc/grub.d, which a... |
| CVE-2012-3368 | — | — | 2.1% | Jul 3, 2012 | Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive information from daemon st... |
| CVE-2012-2181 | — | — | 2.8% | Jul 3, 2012 | Directory traversal vulnerability in the Dojo module in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2 before CF14, and 8.0, a... |
| CVE-2012-3811 | — | — | 62.9% | Jul 3, 2012 | Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call... |
| CVE-2012-2748 | — | — | 1.6% | Jul 3, 2012 | Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to obtain sensitive information via vect... |
| CVE-2012-2747 | — | — | 2.3% | Jul 3, 2012 | Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to gain privileges via unknown attack ve... |
| CVE-2012-2318 | — | — | 1.7% | Jul 3, 2012 | msg.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.4 does not properly handle crafted characters, which... |
| CVE-2012-2214 | — | — | 2.2% | Jul 3, 2012 | proxy.c in libpurple in Pidgin before 2.10.4 does not properly handle canceled SOCKS5 connection attempts, which allows ... |
| CVE-2012-1148 | — | — | 3.6% | Jul 3, 2012 | Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers to... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now