2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-5525 | — | — | 1.6% | Dec 13, 2012 | The get_page_from_gfn hypercall function in Xen 4.2 allows local PV guest OS administrators to cause a denial of service... |
| CVE-2012-5515 | — | — | 0.4% | Dec 13, 2012 | The (1) XENMEM_decrease_reservation, (2) XENMEM_populate_physmap, and (3) XENMEM_exchange hypercalls in Xen 4.2 and earl... |
| CVE-2012-5514 | — | — | 0.4% | Dec 13, 2012 | The guest_physmap_mark_populate_on_demand function in Xen 4.2 and earlier does not properly unlock the subject GFNs when... |
| CVE-2012-5513 | — | — | 0.4% | Dec 13, 2012 | The XENMEM_exchange handler in Xen 4.2 and earlier does not properly check the memory address, which allows local PV gue... |
| CVE-2012-5512 | — | — | 0.4% | Dec 13, 2012 | Array index error in the HVMOP_set_mem_access handler in Xen 4.1 allows local HVM guest OS administrators to cause a den... |
| CVE-2012-5511 | — | — | 0.4% | Dec 13, 2012 | Stack-based buffer overflow in the dirty video RAM tracking functionality in Xen 3.4 through 4.1 allows local HVM guest ... |
| CVE-2012-5510 | — | — | 0.4% | Dec 13, 2012 | Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when ... |
| CVE-2012-4991 | — | — | 4.6% | Dec 13, 2012 | Multiple directory traversal vulnerabilities in Axway SecureTransport 5.1 SP2 and earlier allow remote authenticated use... |
| CVE-2012-3277 | — | — | 2.4% | Dec 13, 2012 | HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not pro... |
| CVE-2012-3276 | — | — | 0.5% | Dec 13, 2012 | HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform and 7.3-2, 8.2, 8.3, and 8.4 on the Alpha platform does not pro... |
| CVE-2012-5678 | — | — | 5.4% | Dec 12, 2012 | Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows, before 10.3.183.48 and 11.x before 11.5.5... |
| CVE-2012-5677 | — | — | 6.9% | Dec 12, 2012 | Integer overflow in Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows, before 10.3.183.48 an... |
| CVE-2012-5676 | — | — | 8.3% | Dec 12, 2012 | Buffer overflow in Adobe Flash Player before 10.3.183.48 and 11.x before 11.5.502.135 on Windows, before 10.3.183.48 and... |
| CVE-2012-5675 | — | — | 0.7% | Dec 12, 2012 | Adobe ColdFusion 9.0 through 9.0.2, and 10, allows local users to bypass intended shared-hosting sandbox permissions via... |
| CVE-2012-5144 | — | — | 3.5% | Dec 12, 2012 | Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC deco... |
| CVE-2012-5143 | — | — | 1.7% | Dec 12, 2012 | Integer overflow in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly h... |
| CVE-2012-5142 | — | — | 2.7% | Dec 12, 2012 | Google Chrome before 23.0.1271.97 does not properly handle history navigation, which allows remote attackers to execute ... |
| CVE-2012-5141 | — | — | 1.0% | Dec 12, 2012 | Google Chrome before 23.0.1271.97 does not properly restrict instantiation of the Chromoting client plug-in, which has u... |
| CVE-2012-5140 | — | — | 1.7% | Dec 12, 2012 | Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service o... |
| CVE-2012-5139 | — | — | 1.7% | Dec 12, 2012 | Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service o... |
| CVE-2012-4977 | — | — | 1.2% | Dec 12, 2012 | Layton Helpbox 4.4.0 allows remote attackers to discover cleartext credentials for the login page by sniffing the networ... |
| CVE-2012-4976 | — | — | 1.2% | Dec 12, 2012 | selectawasset.asp in Layton Helpbox 4.4.0 allows remote attackers to discover ODBC database credentials via an element=s... |
| CVE-2012-4975 | — | — | 0.8% | Dec 12, 2012 | editrequestuser.asp in Layton Helpbox 4.4.0 allows remote authenticated users to change arbitrary support-ticket data vi... |
| CVE-2012-4974 | — | — | 1.1% | Dec 12, 2012 | Layton Helpbox 4.4.0 allows remote authenticated users to change the login context and gain privileges via a modified (1... |
| CVE-2012-4972 | — | — | 1.1% | Dec 12, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in Layton Helpbox 4.4.0 allow remote attackers to inject arbitrary w... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now