2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-5641 | — | — | 8.9% | Mar 18, 2014 | Directory traversal vulnerability in the partition2 function in mochiweb_util.erl in MochiWeb before 2.4.0, as used in A... |
| CVE-2012-5158 | — | — | 0.8% | Mar 14, 2014 | Puppet Enterprise (PE) before 2.6.1 does not properly invalidate sessions when the session secret has changed, which all... |
| CVE-2012-0891 | — | — | 0.9% | Mar 14, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in Puppet Dashboard 1.0 before 1.2.5 and Enterprise 1.0 before 1.2.5... |
| CVE-2012-6290 | — | — | 4.2% | Mar 11, 2014 | SQL injection vulnerability in ImageCMS before 4.2 allows remote authenticated administrators to execute arbitrary SQL c... |
| CVE-2012-6619 | — | — | 3.9% | Mar 6, 2014 | The default configuration for MongoDB before 2.3.2 does not validate objects, which allows remote authenticated users to... |
| CVE-2012-6637 | — | — | 10.0% | Mar 3, 2014 | Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier do not anchor the end of domain-name regular expre... |
| CVE-2012-6636 | — | — | 41.4% | Mar 3, 2014 | The Android API before 17 does not properly restrict the WebView.addJavascriptInterface method, which allows remote atta... |
| CVE-2012-2134 | — | — | 2.3% | Feb 26, 2014 | The handle_connection_error function in ldap_helper.c in bind-dyndb-ldap before 1.1.0rc1 does not properly handle LDAP q... |
| CVE-2012-0270 | — | — | 54.7% | Feb 17, 2014 | Multiple stack-based buffer overflows in Csound before 5.16.6 allow remote attackers to execute arbitrary code via a cra... |
| CVE-2012-6638 | — | — | 3.3% | Feb 15, 2014 | The tcp_rcv_state_process function in net/ipv4/tcp_input.c in the Linux kernel before 3.2.24 allows remote attackers to ... |
| CVE-2012-6108 | — | — | 0.5% | Feb 15, 2014 | HP Linux Imaging and Printing (HPLIP) before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp,... |
| CVE-2012-2663 | — | — | 2.8% | Feb 15, 2014 | extensions/libxt_tcp.c in iptables through 1.4.21 does not match TCP SYN+FIN packets in --syn rules, which might allow r... |
| CVE-2012-1171 | — | — | 2.8% | Feb 15, 2014 | The libxml RSHUTDOWN function in PHP 5.x allows remote attackers to bypass the open_basedir protection mechanism and rea... |
| CVE-2012-1088 | — | — | 0.4% | Feb 15, 2014 | iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by (... |
| CVE-2012-6149 | — | — | 1.6% | Feb 14, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Network (RHN) Sate... |
| CVE-2012-1100 | — | — | 1.2% | Feb 14, 2014 | Red Hat JBoss Operations Network (JON) 3.0.x before 3.0.1, 2.4.2, and earlier, when LDAP authentication is enabled and t... |
| CVE-2012-0062 | — | — | 1.1% | Feb 14, 2014 | Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 allows remote attackers to hijack agent sessi... |
| CVE-2012-0052 | — | — | 1.2% | Feb 14, 2014 | Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 does not check the JON agent key, which allow... |
| CVE-2012-5546 | — | — | — | Feb 10, 2014 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This identifier was publicly assigned by ... |
| CVE-2012-0064 | — | — | 0.4% | Feb 10, 2014 | xkeyboard-config before 2.5 in X.Org before 7.6 enables certain XKB debugging functions by default, which allows physica... |
| CVE-2012-3406 | — | — | 3.2% | Feb 10, 2014 | The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions doe... |
| CVE-2012-3405 | — | — | 2.1% | Feb 10, 2014 | The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not p... |
| CVE-2012-3404 | — | — | 2.2% | Feb 10, 2014 | The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.12 and other versions does not p... |
| CVE-2012-2328 | — | — | 1.9% | Feb 10, 2014 | internal/cimxml/sax/NodeFactory.java in Standards-Based Linux Instrumentation for Manageability (SBLIM) Common Informati... |
| CVE-2012-5524 | — | — | 1.1% | Feb 8, 2014 | The _ssl_verify_callback function in tls_nb.py in Gajim before 0.15.3 does not properly verify SSL certificates, which a... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now