2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-5605 | LOW | 3.3 | 0.4% | Jan 4, 2013 | A flaw was found in Grinder, a component of Red Hat CloudForms. This vulnerability allows a local user to modify Grinder... |
| CVE-2012-5603 | — | — | 1.0% | Jan 4, 2013 | proxies_controller.rb in Katello in Red Hat CloudForms before 1.1 does not properly check permissions, which allows remo... |
| CVE-2012-5581 | — | — | 4.2% | Jan 4, 2013 | Stack-based buffer overflow in tif_dir.c in LibTIFF before 4.0.2 allows remote attackers to cause a denial of service (c... |
| CVE-2012-5516 | — | — | 0.4% | Jan 4, 2013 | Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when moving disks between storage domains, does not prope... |
| CVE-2012-4574 | MEDIUM | 5.5 | 0.4% | Jan 4, 2013 | A flaw was found in Pulp, as used in Red Hat CloudForms. This vulnerability allows a local user to read the administrati... |
| CVE-2012-4556 | — | — | 1.2% | Jan 4, 2013 | The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 allows remote attackers to cause... |
| CVE-2012-4555 | — | — | 1.2% | Jan 4, 2013 | The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 does not properly handle interru... |
| CVE-2012-4543 | — | — | 1.2% | Jan 4, 2013 | Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Certificate System (RHCS) before 8.1.3 allow remote attac... |
| CVE-2012-3538 | — | — | 0.6% | Jan 4, 2013 | Pulp in Red Hat CloudForms before 1.1 logs administrative passwords in a world-readable file, which allows local users t... |
| CVE-2012-2696 | — | — | 0.8% | Jan 4, 2013 | The backend in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1 does not properly check privileges, which a... |
| CVE-2012-0861 | — | — | 0.9% | Jan 4, 2013 | The vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, uses the -k curl... |
| CVE-2012-0860 | — | — | 0.4% | Jan 4, 2013 | Multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when ad... |
| CVE-2012-6348 | — | — | 0.3% | Jan 4, 2013 | Centrify Deployment Manager 2.1.0.283, as distributed in Centrify Suite before 2012.5, allows local users to (1) overwri... |
| CVE-2012-6330 | — | — | 35.7% | Jan 4, 2013 | The localization functionality in TWiki before 5.1.3, and Foswiki 1.0.x through 1.0.10 and 1.1.x through 1.1.6, allows r... |
| CVE-2012-6329 | — | — | 61.6% | Jan 4, 2013 | The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly hand... |
| CVE-2012-5977 | — | — | 2.1% | Jan 4, 2013 | Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.11 befor... |
| CVE-2012-6090 | — | — | 3.1% | Jan 4, 2013 | Multiple stack-based buffer overflows in the expand function in os/pl-glob.c in SWI-Prolog before 6.2.5 and 6.3.x before... |
| CVE-2012-6089 | — | — | 4.0% | Jan 4, 2013 | Multiple stack-based buffer overflows in the canoniseFileName function in os/pl-os.c in SWI-Prolog before 6.2.5 and 6.3.... |
| CVE-2012-5976 | — | — | 3.0% | Jan 4, 2013 | Multiple stack consumption vulnerabilities in Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x ... |
| CVE-2012-6497 | — | — | 2.7% | Jan 4, 2013 | The Authlogic gem for Ruby on Rails, when used with certain versions before 3.2.10, makes potentially unsafe find_by_id ... |
| CVE-2012-6496 | — | — | 4.4% | Jan 4, 2013 | SQL injection vulnerability in the Active Record component in Ruby on Rails before 3.0.18, 3.1.x before 3.1.9, and 3.2.x... |
| CVE-2012-6434 | — | — | 1.4% | Jan 3, 2013 | Multiple cross-site request forgery (CSRF) vulnerabilities in e107_admin/download.php in e107 1.0.2 allow remote attacke... |
| CVE-2012-6433 | — | — | 2.0% | Jan 3, 2013 | Cross-site request forgery (CSRF) vulnerability in e107_admin/newspost.php in e107 1.0.1 allows remote attackers to hija... |
| CVE-2012-5667 | — | — | 1.0% | Jan 3, 2013 | Multiple integer overflows in GNU Grep before 2.11 might allow context-dependent attackers to execute arbitrary code via... |
| CVE-2012-6495 | — | — | 18.6% | Jan 3, 2013 | Multiple directory traversal vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anyw... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now