2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-5613 | — | — | 31.7% | Dec 3, 2012 | MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the... |
| CVE-2012-5612 | — | — | 20.8% | Dec 3, 2012 | Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly ot... |
| CVE-2012-5611 | — | — | 24.6% | Dec 3, 2012 | Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53... |
| CVE-2012-5579 | — | — | — | Dec 3, 2012 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-5611. Reason: This candidate is a duplicate of... |
| CVE-2012-6063 | — | — | 3.6% | Nov 30, 2012 | Double free vulnerability in the sftp_mkdir function in sftp.c in libssh before 0.5.3 allows remote attackers to cause a... |
| CVE-2012-4571 | — | — | 0.4% | Nov 30, 2012 | Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, whi... |
| CVE-2012-4562 | — | — | 12.8% | Nov 30, 2012 | Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or ... |
| CVE-2012-4561 | — | — | 4.8% | Nov 30, 2012 | The (1) publickey_make_dss, (2) publickey_make_rsa, (3) signature_from_string, (4) ssh_do_sign, and (5) ssh_sign_session... |
| CVE-2012-4560 | — | — | 6.5% | Nov 30, 2012 | Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (crash) or possibly... |
| CVE-2012-4559 | — | — | 5.2% | Nov 30, 2012 | Multiple double free vulnerabilities in the (1) agent_sign_data function in agent.c, (2) channel_request function in cha... |
| CVE-2012-4551 | — | — | 1.9% | Nov 30, 2012 | Use-after-free vulnerability in libunity-webapps before 2.4.1 allows remote attackers to cause a denial of service (memo... |
| CVE-2012-4479 | — | — | 1.1% | Nov 30, 2012 | SQL injection vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to execute arbitrar... |
| CVE-2012-4478 | — | — | 0.6% | Nov 30, 2012 | Cross-site request forgery (CSRF) vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers... |
| CVE-2012-4477 | — | — | 1.2% | Nov 30, 2012 | Unspecified vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to bypass access rest... |
| CVE-2012-4476 | — | — | 0.9% | Nov 30, 2012 | Cross-site scripting (XSS) vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to inj... |
| CVE-2012-4475 | — | — | 1.3% | Nov 30, 2012 | The Security Questions module for Drupal 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.1 does not properly restrict ac... |
| CVE-2012-4474 | — | — | 1.2% | Nov 30, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in the Colorbox Node module 7.x-2.x before 7.x-2.2 for Drupal allow ... |
| CVE-2012-4473 | — | — | 1.0% | Nov 30, 2012 | The Restrict node page view module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the "view an... |
| CVE-2012-4472 | — | — | 1.4% | Nov 30, 2012 | Unrestricted file upload vulnerability in upload.php in the Drag & Drop Gallery module 6.x-1.5 and earlier for Drupal al... |
| CVE-2012-4471 | — | — | 1.3% | Nov 30, 2012 | The Search Autocomplete module 7.x-2.x before 7.x-2.4 for Drupal does not properly restrict access to the module admin p... |
| CVE-2012-4470 | — | — | 1.3% | Nov 30, 2012 | The Listhandler module 6.x-1.x before 6.x-1.1 for Drupal does not properly check permissions when importing emails, whic... |
| CVE-2012-4469 | — | — | 1.2% | Nov 30, 2012 | Cross-site scripting (XSS) vulnerability in the Hashcash module 6.x-2.x before 6.x-2.6 and 7.x-2.x before 7.x-2.2 for Dr... |
| CVE-2012-4468 | — | — | 1.2% | Nov 30, 2012 | Cross-site scripting (XSS) vulnerability in the Privatemsg module 7.x-1.x before 7.x-1.3 for Drupal allows remote attack... |
| CVE-2012-5568 | — | — | 9.6% | Nov 30, 2012 | Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP reques... |
| CVE-2012-4834 | — | — | 3.1% | Nov 30, 2012 | Directory traversal vulnerability in LayerLoader.jsp in the theme component in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2 ... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now