2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-1095 | — | — | 1.4% | Feb 6, 2014 | osc before 0.134 might allow remote OBS repository servers or package maintainers to execute arbitrary commands via a cr... |
| CVE-2012-6152 | — | — | 3.8% | Feb 6, 2014 | The Yahoo! protocol plugin in libpurple in Pidgin before 2.10.8 does not properly validate UTF-8 data, which allows remo... |
| CVE-2012-0059 | MEDIUM | 4.9 | 1.7% | Feb 5, 2014 | A flaw was found in Spacewalk-backend. This information disclosure vulnerability occurs when a system registration XML-R... |
| CVE-2012-0875 | — | — | 0.4% | Feb 4, 2014 | SystemTap 1.7, 1.6.7, and probably other versions, when unprivileged mode is enabled, allows local users to obtain sensi... |
| CVE-2012-6493 | — | — | 2.3% | Feb 4, 2014 | Cross-site request forgery (CSRF) vulnerability in Rapid7 Nexpose Security Console before 5.5.4 allows remote attackers ... |
| CVE-2012-2108 | — | — | 6.6% | Feb 4, 2014 | Stack-based buffer overflow in the main function in util/lpci_main.c in Csound before 5.17.2, when converting a file, al... |
| CVE-2012-2107 | — | — | 6.7% | Feb 4, 2014 | Integer overflow in the main function in util/lpci_main.c in Csound before 5.17.2, when converting a file, allows user-a... |
| CVE-2012-2106 | — | — | 5.7% | Feb 4, 2014 | Integer overflow in the pv_import function in util/pv_import.c in Csound 5.16.6, when converting a file, allows remote a... |
| CVE-2012-2250 | — | — | 1.3% | Feb 3, 2014 | Tor before 0.2.3.24-rc allows remote attackers to cause a denial of service (assertion failure and daemon exit) by perfo... |
| CVE-2012-2249 | — | — | 1.3% | Feb 3, 2014 | Tor before 0.2.3.23-rc allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a re... |
| CVE-2012-3427 | MEDIUM | 5.5 | 0.4% | Feb 2, 2014 | A flaw was found in JBoss Enterprise Application Platform (EAP) and EC2 Amazon Machine Image (AMI). Incorrect permission... |
| CVE-2012-3000 | — | — | 1.6% | Jan 30, 2014 | Multiple SQL injection vulnerabilities in sam/admin/reports/php/saveSettings.php in the (1) APM WebGUI in F5 BIG-IP LTM,... |
| CVE-2012-6086 | — | — | 0.9% | Jan 29, 2014 | libs/zbxmedia/eztexting.c in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.8rc1, and 2.1.x before 2.1.2 does not prope... |
| CVE-2012-5192 | — | — | 52.5% | Jan 28, 2014 | Directory traversal vulnerability in gmap/view_overlay.php in Bitweaver 2.8.1 and earlier allows remote attackers to rea... |
| CVE-2012-6447 | — | — | 1.8% | Jan 23, 2014 | Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk 5.0.0 through 5.0.2 allows remote attackers to inject a... |
| CVE-2012-2997 | — | — | 6.4% | Jan 21, 2014 | XML External Entity (XXE) vulnerability in sam/admin/vpe2/public/php/server.php in F5 BIG-IP 10.0.0 through 10.2.4 and 1... |
| CVE-2012-6635 | — | — | 1.9% | Jan 21, 2014 | wp-admin/includes/class-wp-posts-list-table.php in WordPress before 3.3.3 does not properly restrict excerpt-view access... |
| CVE-2012-6634 | — | — | 2.5% | Jan 21, 2014 | wp-admin/media-upload.php in WordPress before 3.3.3 allows remote attackers to obtain sensitive information or bypass in... |
| CVE-2012-6633 | — | — | 2.1% | Jan 21, 2014 | Cross-site scripting (XSS) vulnerability in wp-includes/default-filters.php in WordPress before 3.3.3 allows remote atta... |
| CVE-2012-6632 | — | — | 1.2% | Jan 16, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in Vessio NetBill 1.2 allow remote attackers to inject arbitrary web... |
| CVE-2012-6631 | — | — | 0.7% | Jan 16, 2014 | Cross-site request forgery (CSRF) vulnerability in accounts/admin/index.php in Vessio NetBill 1.2 allows remote attacker... |
| CVE-2012-6630 | — | — | 1.6% | Jan 16, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in the Media Library Categories plugin 1.1.1 for WordPress allow rem... |
| CVE-2012-6629 | — | — | 1.0% | Jan 16, 2014 | Multiple cross-site request forgery (CSRF) vulnerabilities in the Newsletter Manager plugin 1.0.2 and earlier for WordPr... |
| CVE-2012-6628 | — | — | 2.1% | Jan 16, 2014 | Multiple cross-site scripting (XSS) vulnerabilities in the Newsletter Manager plugin before 1.0.2 for WordPress allow re... |
| CVE-2012-6627 | — | — | 1.6% | Jan 16, 2014 | Cross-site scripting (XSS) vulnerability in admin/test_mail.php in the Newsletter Manager plugin 1.0.2 and earlier for W... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now