2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-5970 | — | — | 1.5% | Dec 19, 2012 | The Huawei E585 device allows remote attackers to cause a denial of service (NULL pointer dereference and device outage)... |
| CVE-2012-5969 | — | — | 0.7% | Dec 19, 2012 | Multiple directory traversal vulnerabilities on the Huawei E585 device allow remote attackers to (1) read arbitrary file... |
| CVE-2012-5968 | — | — | 0.4% | Dec 19, 2012 | The Huawei E585 device does not validate the status of admin sessions, which allows remote attackers to obtain sensitive... |
| CVE-2012-5967 | — | — | 3.3% | Dec 19, 2012 | SQL injection vulnerability in menuXML.php in Centreon 2.3.3 through 2.3.9-4 (fixed in Centreon web 2.6.0) allows remote... |
| CVE-2012-5691 | — | — | 52.7% | Dec 19, 2012 | Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers... |
| CVE-2012-5690 | — | — | 3.1% | Dec 19, 2012 | RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allow remote attackers to execute arbitrar... |
| CVE-2012-5178 | — | — | 1.1% | Dec 19, 2012 | Cross-site request forgery (CSRF) vulnerability in the Welcart plugin before 1.2.2 for WordPress allows remote attackers... |
| CVE-2012-5177 | — | — | 1.9% | Dec 19, 2012 | Cross-site scripting (XSS) vulnerability in the Welcart plugin before 1.2.2 for WordPress allows remote attackers to inj... |
| CVE-2012-4848 | — | — | 0.8% | Dec 19, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Foundations Start before 1.2.2c allow remote authentica... |
| CVE-2012-4846 | — | — | 1.2% | Dec 19, 2012 | IBM Lotus Notes 8.5.x before 8.5.3 FP3 does not include the HTTPOnly flag in a Set-Cookie header for a web-application c... |
| CVE-2012-4534 | — | — | 7.5% | Dec 19, 2012 | org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28, when the NIO conne... |
| CVE-2012-4431 | — | — | 9.1% | Dec 19, 2012 | org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32 allows re... |
| CVE-2012-3546 | — | — | 12.0% | Dec 19, 2012 | org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authenticat... |
| CVE-2012-3329 | — | — | 0.3% | Dec 19, 2012 | IBM Advanced Settings Utility (ASU) through 3.62 and 3.70 through 9.21 and Bootable Media Creator (BoMC) through 2.30 an... |
| CVE-2012-4350 | — | — | 0.5% | Dec 18, 2012 | Multiple unquoted Windows search path vulnerabilities in the (1) Manager and (2) Agent components in Symantec Enterprise... |
| CVE-2012-4348 | — | — | 1.2% | Dec 18, 2012 | The management console in Symantec Endpoint Protection (SEP) 11.0 before RU7-MP3 and 12.1 before RU2, and Symantec Endpo... |
| CVE-2012-4898 | — | — | 0.9% | Dec 18, 2012 | Mesh OS before 7.9.1.1 on Tropos wireless mesh routers does not use a sufficient source of entropy for SSH keys, which m... |
| CVE-2012-4693 | — | — | 0.2% | Dec 18, 2012 | Invensys Wonderware InTouch 2012 R2 and earlier and Siemens ProcessSuite use a weak encryption algorithm for data in Ps_... |
| CVE-2012-4691 | — | — | 0.9% | Dec 18, 2012 | Memory leak in Siemens Automation License Manager (ALM) 4.x and 5.x before 5.2 allows remote attackers to cause a denial... |
| CVE-2012-5622 | — | — | 0.7% | Dec 18, 2012 | Cross-site request forgery (CSRF) vulnerability in the management console (openshift-console/app/controllers/application... |
| CVE-2012-5610 | — | — | 2.2% | Dec 18, 2012 | Incomplete blacklist vulnerability in lib/filesystem.php in ownCloud before 4.0.9 and 4.5.x before 4.5.2 allows remote a... |
| CVE-2012-5609 | — | — | 2.1% | Dec 18, 2012 | Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.5.2 allows remote authenticated users to exec... |
| CVE-2012-5608 | — | — | 1.8% | Dec 18, 2012 | Cross-site scripting (XSS) vulnerability in apps/user_webdavauth/settings.php in ownCloud 4.5.x before 4.5.2 allows remo... |
| CVE-2012-5607 | — | — | 2.1% | Dec 18, 2012 | The "Lost Password" reset functionality in ownCloud before 4.0.9 and 4.5.0 does not properly check the security token, w... |
| CVE-2012-5606 | — | — | 2.1% | Dec 18, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.9 and 4.5.0 allow remote attackers to inject ... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now