2012 CVE Vulnerabilities
5,939 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-0333 | — | — | 1.1% | May 2, 2012 | Cisco Small Business IP phones with SPA 500 series firmware 7.4.9 and earlier do not require authentication for Push XML... |
| CVE-2012-0279 | — | — | 0.3% | May 1, 2012 | Quest Toad for Data Analysts 3.0.1 uses weak permissions (Everyone: Full Control) for the %COMMONPROGRAMFILES%\Quest Sha... |
| CVE-2012-2162 | — | — | 1.2% | May 1, 2012 | The Web Server Plug-in in IBM WebSphere Application Server (WAS) 8.0 and earlier uses unencrypted HTTP communication aft... |
| CVE-2012-0878 | — | — | 4.0% | May 1, 2012 | Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which migh... |
| CVE-2012-2217 | — | — | 2.1% | May 1, 2012 | The HTC IQRD service for Android on the HTC EVO 4G before 4.67.651.3, EVO Design 4G before 2.12.651.5, Shift 4G before 2... |
| CVE-2012-1521 | — | — | 2.2% | May 1, 2012 | Use-after-free vulnerability in the XML parser in Google Chrome before 18.0.1025.168 allows remote attackers to cause a ... |
| CVE-2012-2416 | — | — | 2.2% | Apr 30, 2012 | chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x before 10.3.1 and Asterisk B... |
| CVE-2012-2415 | — | — | 2.7% | Apr 30, 2012 | Heap-based buffer overflow in chan_skinny.c in the Skinny channel driver in Asterisk Open Source 1.6.2.x before 1.6.2.24... |
| CVE-2012-2414 | — | — | 2.7% | Apr 30, 2012 | main/manager.c in the Manager Interface in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x before 1.8.11.1, and 10.x... |
| CVE-2012-2111 | — | — | 4.8% | Apr 30, 2012 | The (1) CreateAccount, (2) OpenAccount, (3) AddAccountRights, and (4) RemoveAccountRights LSA RPC procedures in smbd in ... |
| CVE-2012-0863 | — | — | 0.4% | Apr 30, 2012 | Mumble 1.2.3 and earlier uses world-readable permissions for .local/share/data/Mumble/.mumble.sqlite files in home direc... |
| CVE-2012-2213 | — | — | 12.3% | Apr 28, 2012 | Squid 3.1.9 allows remote attackers to bypass the access configuration for the CONNECT method by providing an arbitrary ... |
| CVE-2012-2212 | — | — | 1.4% | Apr 28, 2012 | McAfee Web Gateway 7.0 allows remote attackers to bypass the access configuration for the CONNECT method by providing an... |
| CVE-2012-2441 | — | — | 8.6% | Apr 28, 2012 | RuggedCom Rugged Operating System (ROS) before 3.3 has a factory account with a password derived from the MAC Address fi... |
| CVE-2012-2440 | — | — | 1.4% | Apr 28, 2012 | The default configuration of the TP-Link 8840T router enables web-based administration on the WAN interface, which allow... |
| CVE-2012-2439 | — | — | 2.2% | Apr 28, 2012 | The default configuration of the NETGEAR ProSafe FVS318N firewall enables web-based administration on the WAN interface,... |
| CVE-2012-1803 | — | — | 49.1% | Apr 28, 2012 | RuggedCom Rugged Operating System (ROS) 3.10.x and earlier has a factory account with a password derived from the MAC Ad... |
| CVE-2012-0466 | — | — | 0.9% | Apr 27, 2012 | template/en/default/list/list.js.tmpl in Bugzilla 2.x and 3.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and ... |
| CVE-2012-0465 | — | — | 1.2% | Apr 27, 2012 | Bugzilla 3.5.x and 3.6.x before 3.6.9, 3.7.x and 4.0.x before 4.0.6, and 4.1.x and 4.2.x before 4.2.1, when the inbound_... |
| CVE-2012-1244 | — | — | 0.7% | Apr 27, 2012 | The NTT DOCOMO sp mode mail application 5400 and earlier for Android does not properly verify X.509 certificates from SS... |
| CVE-2012-1242 | — | — | 0.4% | Apr 27, 2012 | Untrusted search path vulnerability in JustSystems Ichitaro 2011 Sou, Ichitaro 2006 through 2011, Ichitaro Government 20... |
| CVE-2012-0269 | — | — | 4.2% | Apr 27, 2012 | Buffer overflow in JustSystems Ichitaro 2011 Sou, Ichitaro 2006 through 2011, Ichitaro Government 2006 through 2010, Ich... |
| CVE-2012-1245 | — | — | 1.2% | Apr 27, 2012 | Cross-site scripting (XSS) vulnerability in the cleanup_urls function in forum/utils/html.py in OSQA before 1234, and 0.... |
| CVE-2012-2425 | — | — | 1.4% | Apr 25, 2012 | The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit ... |
| CVE-2012-2424 | — | — | 1.2% | Apr 25, 2012 | The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit ... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now