2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-6082 | — | — | 2.1% | Jan 3, 2013 | Cross-site scripting (XSS) vulnerability in the rsslink function in theme/__init__.py in MoinMoin 1.9.5 allows remote at... |
| CVE-2012-6081 | — | — | 30.6% | Jan 3, 2013 | Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action... |
| CVE-2012-6080 | — | — | 4.0% | Jan 3, 2013 | Directory traversal vulnerability in the _do_attachment_move function in the AttachFile action (action/AttachFile.py) in... |
| CVE-2012-5666 | — | — | 2.1% | Jan 3, 2013 | Cross-site scripting (XSS) vulnerability in bookmarks/js/bookmarks.js in ownCloud 4.0.x before 4.0.10 and 4.5.x before 4... |
| CVE-2012-5665 | — | — | 2.3% | Jan 3, 2013 | ownCloud 4.0.x before 4.0.10 and 4.5.x before 4.5.5 does not properly restrict access to settings.php, which allows remo... |
| CVE-2012-5655 | — | — | 1.7% | Jan 3, 2013 | The Context module 6.x-3.x before 6.x-3.1 and 7.x-3.x before 7.x-3.0-beta6 for Drupal does not properly restrict access ... |
| CVE-2012-5654 | — | — | 1.2% | Jan 3, 2013 | The Nodewords: D6 Meta Tags module before 6.x-1.14 for Drupal, when configured to automatically generate description met... |
| CVE-2012-5653 | — | — | 1.7% | Jan 3, 2013 | The file upload feature in Drupal 6.x before 6.27 and 7.x before 7.18 allows remote authenticated users to bypass the pr... |
| CVE-2012-5652 | — | — | 2.4% | Jan 3, 2013 | Drupal 6.x before 6.27 allows remote attackers to obtain sensitive information about uploaded files via a (1) RSS feed o... |
| CVE-2012-5651 | — | — | 2.7% | Jan 3, 2013 | Drupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users, which might allow remote attackers to... |
| CVE-2012-4545 | — | — | 1.9% | Jan 3, 2013 | The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using ... |
| CVE-2012-2379 | — | — | 4.1% | Jan 3, 2013 | Apache CXF 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1, when a Supporting Token specifies a child WS-... |
| CVE-2012-6472 | — | — | 0.3% | Jan 2, 2013 | Opera before 12.12 on UNIX uses weak permissions for the profile directory, which allows local users to obtain sensitive... |
| CVE-2012-6471 | — | — | 1.5% | Jan 2, 2013 | Opera before 12.12 allows remote attackers to spoof the address field via a high rate of HTTP requests. |
| CVE-2012-6470 | — | — | 7.8% | Jan 2, 2013 | Opera before 12.12 does not properly allocate memory for GIF images, which allows remote attackers to execute arbitrary ... |
| CVE-2012-6469 | — | — | 1.4% | Jan 2, 2013 | Opera before 12.11 allows remote attackers to determine the existence of arbitrary local files via vectors involving web... |
| CVE-2012-6468 | — | — | 4.1% | Jan 2, 2013 | Heap-based buffer overflow in Opera before 12.11 allows remote attackers to execute arbitrary code or cause a denial of ... |
| CVE-2012-6467 | — | — | 1.5% | Jan 2, 2013 | Opera before 12.10 follows Internet shortcuts that are referenced by a (1) IMG element or (2) other inline element, whic... |
| CVE-2012-6466 | — | — | 1.7% | Jan 2, 2013 | Opera before 12.10 does not properly handle incorrect size data in a WebP image, which allows remote attackers to obtain... |
| CVE-2012-6465 | — | — | 3.8% | Jan 2, 2013 | Opera before 12.10 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) vi... |
| CVE-2012-6464 | — | — | 1.4% | Jan 2, 2013 | Cross-site scripting (XSS) vulnerability in Opera before 12.10 allows remote attackers to inject arbitrary web script or... |
| CVE-2012-6463 | — | — | 1.4% | Jan 2, 2013 | Cross-site scripting (XSS) vulnerability in Opera before 12.10 allows remote attackers to inject arbitrary web script or... |
| CVE-2012-6462 | — | — | 1.8% | Jan 2, 2013 | Opera before 12.10 does not properly implement the Cross-Origin Resource Sharing (CORS) specification, which allows remo... |
| CVE-2012-6461 | — | — | 0.9% | Jan 2, 2013 | The X.509 certificate-validation functionality in the https implementation in Opera before 12.10 allows remote attackers... |
| CVE-2012-6460 | — | — | 1.9% | Jan 2, 2013 | Opera before 11.67 and 12.x before 12.02 allows remote attackers to cause truncation of a dialog, and possibly trigger d... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now