2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-4533 | — | — | 3.1% | Nov 19, 2012 | Cross-site scripting (XSS) vulnerability in the "extra" details in the DiffSource._get_row function in lib/viewvc.py in ... |
| CVE-2012-4552 | — | — | 10.0% | Nov 18, 2012 | Stack-based buffer overflow in the error function in ssg/ssgParser.cxx in PLIB 1.8.5 allows remote attackers to execute ... |
| CVE-2012-4520 | — | — | 3.6% | Nov 18, 2012 | The django.http.HttpRequest.get_host function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attacker... |
| CVE-2012-4433 | — | — | 13.3% | Nov 18, 2012 | Multiple integer overflows in operations/external/ppm-load.c in GEGL (Generic Graphics Library) 0.2.0 allow remote attac... |
| CVE-2012-4417 | — | — | 0.3% | Nov 18, 2012 | GlusterFS 3.3.0, as used in Red Hat Storage server 2.0, allows local users to overwrite arbitrary files via a symlink at... |
| CVE-2012-4950 | — | — | 1.3% | Nov 18, 2012 | Cross-site scripting (XSS) vulnerability in the Keyword Search page in the web interface in Pattern Insight 2.3 allows r... |
| CVE-2012-4947 | — | — | 1.7% | Nov 18, 2012 | Agile FleetCommander and FleetCommander Kiosk before 4.08 store database credentials in cleartext, which allows remote a... |
| CVE-2012-4946 | — | — | 0.9% | Nov 18, 2012 | Agile FleetCommander and FleetCommander Kiosk before 4.08 use an XOR format for password encryption, which makes it easi... |
| CVE-2012-4945 | — | — | 1.9% | Nov 18, 2012 | Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attackers to execute arbitrary commands via unspe... |
| CVE-2012-4944 | — | — | 3.8% | Nov 18, 2012 | Multiple unrestricted file upload vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow rem... |
| CVE-2012-4943 | — | — | 0.7% | Nov 18, 2012 | Multiple cross-site request forgery (CSRF) vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 ... |
| CVE-2012-4942 | — | — | 1.0% | Nov 18, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow r... |
| CVE-2012-4941 | — | — | 1.2% | Nov 18, 2012 | Multiple SQL injection vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attacke... |
| CVE-2012-4938 | — | — | 1.1% | Nov 18, 2012 | Cross-site scripting (XSS) vulnerability in the web interface in Pattern Insight 2.3 allows remote authenticated adminis... |
| CVE-2012-4937 | — | — | 2.4% | Nov 18, 2012 | Session fixation vulnerability in the web interface in Pattern Insight 2.3 allows remote attackers to hijack web session... |
| CVE-2012-4936 | — | — | 1.5% | Nov 18, 2012 | The web interface in Pattern Insight 2.3 allows remote attackers to conduct clickjacking attacks via a FRAME element. |
| CVE-2012-4935 | — | — | 0.7% | Nov 18, 2012 | Cross-site request forgery (CSRF) vulnerability in the web interface in Pattern Insight 2.3 allows remote attackers to h... |
| CVE-2012-4959 | — | — | 71.2% | Nov 18, 2012 | Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and ex... |
| CVE-2012-4958 | — | — | 73.5% | Nov 18, 2012 | Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrar... |
| CVE-2012-4957 | — | — | 67.1% | Nov 18, 2012 | Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbi... |
| CVE-2012-4956 | — | — | 37.7% | Nov 18, 2012 | Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to execute arbitrary co... |
| CVE-2012-4575 | — | — | 2.1% | Nov 18, 2012 | The add_database function in objects.c in the pgbouncer pooler 1.5.2 for PostgreSQL allows remote attackers to cause a d... |
| CVE-2012-5917 | — | — | 2.5% | Nov 17, 2012 | SnackAmp 3.1.3 allows remote attackers to cause a denial of service (application crash) via a long string in an aiff fil... |
| CVE-2012-5916 | — | — | 1.3% | Nov 17, 2012 | Neocrome Seditio build 161 allows remote attackers to obtain sensitive information via a direct request to (1) docs/new/... |
| CVE-2012-5915 | — | — | 1.2% | Nov 17, 2012 | Neocrome Seditio build 161 and earlier allows remote attackers to obtain sensitive information via direct request to (1)... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now