2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-0718 | MEDIUM | 5.4 | 0.8% | Feb 18, 2020 | IBM Tivoli Endpoint Manager 8 does not set the HttpOnly flag on cookies. |
| CVE-2012-1903 | MEDIUM | 5.4 | 0.5% | Feb 13, 2020 | XSS in Telligent Community 5.6.583.20496 via a flash file and related to the allowScriptAccess parameter. |
| CVE-2012-1500 | MEDIUM | 5.4 | 1.1% | Feb 13, 2020 | Stored XSS vulnerability in UpdateFieldJson.jspa in JIRA 4.4.3 and GreenHopper before 5.9.8 allows an attacker to inject... |
| CVE-2012-0810 | MEDIUM | 5.5 | 0.4% | Feb 12, 2020 | The int3 handler in the Linux kernel before 3.3 relies on a per-CPU debug stack, which allows local users to cause a den... |
| CVE-2012-6721 | MEDIUM | 6.3 | 0.3% | Feb 11, 2020 | Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) Forum, (2) Event, and (3) Classifieds plugins in S... |
| CVE-2012-6720 | MEDIUM | 6.1 | 0.8% | Feb 11, 2020 | Multiple cross-site scripting (XSS) vulnerabilities in SocialEngine before 4.2.4 allow remote attackers to inject arbitr... |
| CVE-2012-2517 | MEDIUM | 6.1 | 1.9% | Feb 11, 2020 | Cross-site scripting (XSS) vulnerability in PrestaShop before 1.4.9 allows remote attackers to inject arbitrary web scri... |
| CVE-2012-2452 | MEDIUM | 6.1 | 1.7% | Feb 11, 2020 | Multiple cross-site scripting (XSS) vulnerabilities in pragmaMx 1.x before 1.12.2 allow remote attackers to inject arbit... |
| CVE-2012-4519 | MEDIUM | 6.1 | 0.7% | Feb 11, 2020 | Zenphoto before 1.4.3.4 admin-news-articles.php date parameter XSS. |
| CVE-2012-5828 | MEDIUM | 6.5 | 2.1% | Feb 10, 2020 | BlackBerry PlayBook before 2.1 has an Information Disclosure Vulnerability via a Web browser component error |
| CVE-2012-2204 | MEDIUM | 5.5 | 0.3% | Feb 10, 2020 | InfoSphere Guardium aix_ktap module: DoS |
| CVE-2012-1994 | MEDIUM | 5.7 | 0.8% | Feb 10, 2020 | HP Systems Insight Manager before 7.0 allows a remote user on adjacent network to access information |
| CVE-2012-6449 | MEDIUM | 5.4 | 0.6% | Feb 10, 2020 | The clientconf.html and detailbw.html pages in x3 in cPanel & WHM 11.34.0 (build 8) have a XSS vulnerability. |
| CVE-2012-6666 | MEDIUM | 6.1 | 0.9% | Feb 10, 2020 | vBSeo before 3.6.0PL2 allows XSS via the member.php u parameter. |
| CVE-2012-5570 | MEDIUM | 4.3 | 1.1% | Feb 8, 2020 | The Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with the "access basic_webm... |
| CVE-2012-4029 | MEDIUM | 6.1 | 1.4% | Feb 8, 2020 | Cross-site scripting (XSS) vulnerability in main/dropbox/index.php in Chamilo LMS before 1.8.8.6 allows remote attackers... |
| CVE-2012-6341 | MEDIUM | 6.5 | 1.3% | Feb 6, 2020 | An Information Disclosure vulnerability exists in the my config file in NEtGEAR WGR614 v7 and v9, which could let a mali... |
| CVE-2012-6340 | MEDIUM | 4.6 | 1.2% | Feb 6, 2020 | An Authentication vulnerability exists in NETGEAR WGR614 v7 and v9 due to a hardcoded credential used for serial program... |
| CVE-2012-2593 | MEDIUM | 6.1 | 6.2% | Feb 6, 2020 | Cross-site scripting (XSS) vulnerability in the administrative interface in Atmail Webmail Server 6.4 allows remote atta... |
| CVE-2012-6133 | MEDIUM | 6.1 | 1.5% | Jan 30, 2020 | Multiple cross-site scripting (XSS) vulnerabilities in Roundup before 1.4.20 allow remote attackers to inject arbitrary ... |
| CVE-2012-5776 | MEDIUM | 5.4 | 0.5% | Jan 29, 2020 | Dokeos 2.1.1 has multiple XSS issues involving "extra_" parameters in main/auth/profile.php. |
| CVE-2012-6114 | MEDIUM | 5.5 | 0.4% | Jan 28, 2020 | The git-changelog utility in git-extras 1.7.0 allows local users to overwrite arbitrary files via a symlink attack on (1... |
| CVE-2012-6448 | MEDIUM | 6.1 | 1.5% | Jan 27, 2020 | Cross-site Scripting (XSS) in cPanel WebHost Manager (WHM) 11.34.0 allows remote attackers to inject arbitrary web scrip... |
| CVE-2012-6494 | MEDIUM | 6.1 | 1.2% | Jan 25, 2020 | Rapid7 Nexpose before 5.5.4 contains a session hijacking vulnerability which allows remote attackers to capture a user's... |
| CVE-2012-6344 | MEDIUM | 6.1 | 0.7% | Jan 25, 2020 | Novell ZENworks Configuration Management before 11.2.4 allows XSS. |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now