2012 CVE Vulnerabilities

5,944 CVEs published in 2012.

CVE IDSeverityCVSSDescription
CVE-2012-6475——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n...
CVE-2012-6474——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n...
CVE-2012-6473——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was n...
CVE-2012-0953MEDIUM5A race condition was discovered in the Linux drivers for Nvidia graphics which allowed an attacker to exfiltrate kernel ...
CVE-2012-0952MEDIUM5A heap buffer overflow was discovered in the device control ioctl in the Linux driver for Nvidia graphics cards, which m...
CVE-2012-1101MEDIUM5.5systemd 37-1 does not properly handle non-existent services, which causes a denial of service (failure of login procedur...
CVE-2012-1096MEDIUM5.5NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connect...
CVE-2012-1094HIGH7.5JBoss AS 7 prior to 7.1.1 and mod_cluster do not handle default hostname in the same way, which can cause the excluded-c...
CVE-2012-0785HIGH7.5Hash collision attack vulnerability in Jenkins before 1.447, Jenkins LTS before 1.424.2, and Jenkins Enterprise by Cloud...
CVE-2012-1093HIGH7.8The init script in the Debian x11-common package before 1:7.6+12 is vulnerable to a symlink attack that can lead to a pr...
CVE-2012-0844MEDIUM5.5Information-disclosure vulnerability in Netsurf through 2.8 due to a world-readable cookie jar.
CVE-2012-0828CRITICAL9.8Heap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo architecture could allow remote ...
CVE-2012-6277HIGH7.8Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Micros...
CVE-2012-0063HIGH8.1Insecure plugin update mechanism in tucan through 0.3.10 could allow remote attackers to perform man-in-the-middle attac...
CVE-2012-5236——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu...
CVE-2012-3351MEDIUM6.1Multiple cross-site scripting (XSS) vulnerabilities in LongTail Video JW Player through 5.10.2295 allow remote attackers...
CVE-2012-2599——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-3835. Reason: This issue was MERGED into CVE-201...
CVE-2012-5366HIGH7.5The IPv6 implementation in Apple Mac OS X (unknown versions, year 2012 and earlier) allows remote attackers to cause a d...
CVE-2012-5365HIGH7.5The IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows remote attackers to cause...
CVE-2012-5364HIGH7.5The IPv6 implementation in Microsoft Windows 7 and earlier allows remote attackers to cause a denial of service via a fl...
CVE-2012-5363HIGH7.5The IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows remote attackers to cause...
CVE-2012-5362HIGH7.5The IPv6 implementation in Microsoft Windows 7 and earlier allows remote attackers to cause a denial of service via a fl...
CVE-2012-2629HIGH8.8Multiple cross-site request forgery (CSRF) and cross-site scripting (XSS) vulnerabilities in Axous 1.1.1 and earlier all...
CVE-2012-0055HIGH7.8OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security chec...
CVE-2012-6685HIGH7.5Nokogiri before 1.5.4 is vulnerable to XXE attacks

Check if your code is affected by 2012 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now