2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-2705 | — | — | 1.6% | Jun 27, 2012 | The filter_titles function in the Smart Breadcrumb module 6.x-1.x before 6.x-1.3 for Drupal does not properly convert a ... |
| CVE-2012-2703 | — | — | 1.9% | Jun 27, 2012 | Cross-site scripting (XSS) vulnerability in the Advertisement module 6.x-2.x before 6.x-2.3 for Drupal, when debug mode ... |
| CVE-2012-2702 | — | — | 2.6% | Jun 27, 2012 | The Ubercart Product Keys module 6.x-1.x before 6.x-1.1 for Drupal does not properly check access for product keys, whic... |
| CVE-2012-2701 | — | — | — | Jun 27, 2012 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-2341. Reason: This candidate is a duplicate of... |
| CVE-2012-2700 | — | — | — | Jun 27, 2012 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-2340. Reason: This candidate is a duplicate of... |
| CVE-2012-2699 | — | — | — | Jun 27, 2012 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-2339. Reason: This candidate is a duplicate of... |
| CVE-2012-2732 | — | — | — | Jun 26, 2012 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-2021. Reason: This candidate is a duplicate of... |
| CVE-2012-2122 | — | — | 96.2% | Jun 26, 2012 | sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x befor... |
| CVE-2012-2639 | — | — | — | Jun 26, 2012 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4940. Reason: This candidate is a reservation ... |
| CVE-2012-2381 | — | — | 2.5% | Jun 26, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in Apache Roller before 5.0.1 allow remote authenticated users to in... |
| CVE-2012-2380 | — | — | 1.6% | Jun 26, 2012 | Multiple cross-site request forgery (CSRF) vulnerabilities in the admin/editor console in Apache Roller before 5.0.1 all... |
| CVE-2012-3797 | — | — | 12.5% | Jun 25, 2012 | Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, does not ... |
| CVE-2012-3796 | — | — | 10.9% | Jun 25, 2012 | Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows re... |
| CVE-2012-3795 | — | — | 11.2% | Jun 25, 2012 | Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows re... |
| CVE-2012-3794 | — | — | 22.0% | Jun 25, 2012 | Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows re... |
| CVE-2012-3793 | — | — | 12.2% | Jun 25, 2012 | Integer overflow in Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 an... |
| CVE-2012-3792 | — | — | 11.2% | Jun 25, 2012 | Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows re... |
| CVE-2012-2695 | — | — | 2.9% | Jun 22, 2012 | The Active Record component in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 does not properly... |
| CVE-2012-2694 | — | — | 4.1% | Jun 22, 2012 | actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.... |
| CVE-2012-2661 | — | — | 4.1% | Jun 22, 2012 | The Active Record component in Ruby on Rails 3.0.x before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not pr... |
| CVE-2012-2660 | — | — | 4.6% | Jun 22, 2012 | actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.... |
| CVE-2012-2179 | — | — | 1.7% | Jun 22, 2012 | libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporar... |
| CVE-2012-2172 | — | — | 1.6% | Jun 22, 2012 | Cross-site scripting (XSS) vulnerability in SoftwareRegistration.do in the Storage Manager Profiler in IBM System Storag... |
| CVE-2012-2171 | — | — | 5.1% | Jun 22, 2012 | SQL injection vulnerability in ModuleServlet.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager... |
| CVE-2012-0304 | — | — | 0.3% | Jun 22, 2012 | Symantec LiveUpdate Administrator before 2.3.1 uses weak permissions (Everyone: Full Control) for the installation direc... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now