2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-0738 | — | — | 0.6% | Dec 28, 2012 | IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not validate X.509 certifica... |
| CVE-2012-6432 | — | — | 1.2% | Dec 27, 2012 | Symfony 2.0.x before 2.0.20, 2.1.x before 2.1.5, and 2.2-dev, when the internal routes configuration is enabled, allows ... |
| CVE-2012-6431 | — | — | 1.9% | Dec 27, 2012 | Symfony 2.0.x before 2.0.20 does not process URL encoded data consistently within the Routing and Security components, w... |
| CVE-2012-5868 | — | — | 2.4% | Dec 27, 2012 | WordPress 3.4.2 does not invalidate a wordpress_sec session cookie upon an administrator's logout action, which makes it... |
| CVE-2012-5532 | — | — | 0.4% | Dec 27, 2012 | The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd, as distributed in the Linux kernel before 3.8-rc1, allows l... |
| CVE-2012-2669 | — | — | 0.4% | Dec 27, 2012 | The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd, as distributed in the Linux kernel before 3.4.5, does not v... |
| CVE-2012-6314 | — | — | 1.8% | Dec 26, 2012 | Citrix XenDesktop Virtual Desktop Agent (VDA) 5.6.x before 5.6.200, when making changes to the server-side policy that c... |
| CVE-2012-5625 | MEDIUM | 6.5 | 2.0% | Dec 26, 2012 | OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not prope... |
| CVE-2012-5483 | — | — | 0.3% | Dec 26, 2012 | tools/sample_data.sh in OpenStack Keystone 2012.1.3, when access to Amazon Elastic Compute Cloud (Amazon EC2) is configu... |
| CVE-2012-5161 | — | — | 5.7% | Dec 26, 2012 | The XML Service interface in Citrix XenApp 6.5 and 6.5 Feature Pack 1 allows remote attackers to execute arbitrary code ... |
| CVE-2012-0962 | — | — | 1.8% | Dec 26, 2012 | Aptdaemon 0.43 in Ubuntu 11.10 and 12.04 LTS uses short IDs when importing PPA GPG keys from a keyserver, which allows r... |
| CVE-2012-0961 | — | — | 0.4% | Dec 26, 2012 | Apt 0.8.16~exp5ubuntu13.x before 0.8.16~exp5ubuntu13.6, 0.8.16~exp12ubuntu10.x before 0.8.16~exp12ubuntu10.7, and 0.9.7.... |
| CVE-2012-0958 | — | — | 1.6% | Dec 26, 2012 | content/unity-api.js in the unity-firefox-extension extension 2.4.1 for Firefox exposes the toDataURL function in an API... |
| CVE-2012-6299 | — | — | 2.8% | Dec 26, 2012 | Unspecified vulnerability in CA IdentityMinder r12.0 through CR16, r12.5 before SP15, and r12.6 GA allows remote attacke... |
| CVE-2012-6298 | — | — | 2.8% | Dec 26, 2012 | Unspecified vulnerability in CA IdentityMinder r12.0 through CR16, r12.5 before SP15, and r12.6 GA allows remote attacke... |
| CVE-2012-5664 | — | — | — | Dec 26, 2012 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-6496, CVE-2012-6497. Reason: this candidate was ... |
| CVE-2012-4616 | — | — | 1.8% | Dec 26, 2012 | Directory traversal vulnerability in the Web UI in EMC Data Protection Advisor (DPA) 5.6 through SP1, 5.7 through SP1, a... |
| CVE-2012-5951 | — | — | 0.4% | Dec 26, 2012 | Unspecified vulnerability in IBM Tivoli NetView 1.4, 5.1 through 5.4, and 6.1 on z/OS allows local users to gain privile... |
| CVE-2012-4816 | — | — | 1.3% | Dec 26, 2012 | IBM Rational Automation Framework (RAF) 3.x through 3.0.0.5 allows remote attackers to bypass intended Env Gen Wizard (a... |
| CVE-2012-5591 | — | — | 1.2% | Dec 26, 2012 | Cross-site scripting (XSS) vulnerability in the Zero Point module 6.x-1.x before 6.x-1.18 and 7.x-1.x before 7.x-1.4 for... |
| CVE-2012-5590 | — | — | 1.2% | Dec 26, 2012 | SQL injection vulnerability in the Webmail Plus module for Drupal allows remote attackers to execute arbitrary SQL comma... |
| CVE-2012-5589 | — | — | 1.0% | Dec 26, 2012 | The MultiLink module 6.x-2.x before 6.x-2.7 and 7.x-2.x before 7.x-2.7 for Drupal does not properly check node permissio... |
| CVE-2012-5588 | — | — | 1.2% | Dec 26, 2012 | The Email Field module 6.x-1.x before 6.x-1.3 for Drupal, when using a field permission module and the field contact fie... |
| CVE-2012-5587 | — | — | 1.1% | Dec 26, 2012 | Cross-site scripting (XSS) vulnerability in the Email Field module 6.x-1.x before 6.x-1.3 for Drupal allows remote attac... |
| CVE-2012-5586 | — | — | 1.0% | Dec 26, 2012 | The Services module 6.x-3.x before 6.x-3.3 and 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with ... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now