2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-5144 | — | — | 3.5% | Dec 12, 2012 | Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC deco... |
| CVE-2012-5143 | — | — | 1.7% | Dec 12, 2012 | Integer overflow in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly h... |
| CVE-2012-5142 | — | — | 2.7% | Dec 12, 2012 | Google Chrome before 23.0.1271.97 does not properly handle history navigation, which allows remote attackers to execute ... |
| CVE-2012-5141 | — | — | 1.0% | Dec 12, 2012 | Google Chrome before 23.0.1271.97 does not properly restrict instantiation of the Chromoting client plug-in, which has u... |
| CVE-2012-5140 | — | — | 1.7% | Dec 12, 2012 | Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service o... |
| CVE-2012-5139 | — | — | 1.7% | Dec 12, 2012 | Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service o... |
| CVE-2012-4977 | — | — | 1.2% | Dec 12, 2012 | Layton Helpbox 4.4.0 allows remote attackers to discover cleartext credentials for the login page by sniffing the networ... |
| CVE-2012-4976 | — | — | 1.2% | Dec 12, 2012 | selectawasset.asp in Layton Helpbox 4.4.0 allows remote attackers to discover ODBC database credentials via an element=s... |
| CVE-2012-4975 | — | — | 0.8% | Dec 12, 2012 | editrequestuser.asp in Layton Helpbox 4.4.0 allows remote authenticated users to change arbitrary support-ticket data vi... |
| CVE-2012-4974 | — | — | 1.1% | Dec 12, 2012 | Layton Helpbox 4.4.0 allows remote authenticated users to change the login context and gain privileges via a modified (1... |
| CVE-2012-4972 | — | — | 1.1% | Dec 12, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in Layton Helpbox 4.4.0 allow remote attackers to inject arbitrary w... |
| CVE-2012-4971 | — | — | 1.2% | Dec 12, 2012 | Multiple SQL injection vulnerabilities in Layton Helpbox 4.4.0 allow remote attackers to execute arbitrary SQL commands ... |
| CVE-2012-4791 | — | — | 13.4% | Dec 12, 2012 | Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service (... |
| CVE-2012-4787 | CRITICAL | 9 | 17.6% | Dec 12, 2012 | Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code v... |
| CVE-2012-4786 | — | — | 24.2% | Dec 12, 2012 | The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server ... |
| CVE-2012-4782 | — | — | 25.6% | Dec 12, 2012 | Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code v... |
| CVE-2012-4781 | — | — | 18.5% | Dec 12, 2012 | Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary co... |
| CVE-2012-4774 | — | — | 20.8% | Dec 12, 2012 | Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, a... |
| CVE-2012-2556 | — | — | 20.8% | Dec 12, 2012 | The OpenType Font (OTF) driver in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, ... |
| CVE-2012-2549 | — | — | 10.0% | Dec 12, 2012 | The IP-HTTPS server in Windows Server 2008 R2 and R2 SP1 and Server 2012 does not properly validate certificates, which ... |
| CVE-2012-2539 | HIGH | 7.8 | 53.2% | Dec 12, 2012 | Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office ... |
| CVE-2012-1537 | — | — | 22.6% | Dec 12, 2012 | Heap-based buffer overflow in DirectPlay in DirectX 9.0 through 11.1 in Microsoft Windows XP SP2 and SP3, Windows Server... |
| CVE-2012-6313 | — | — | 7.2% | Dec 11, 2012 | simple-gmail-login.php in the Simple Gmail Login plugin before 1.1.4 for WordPress allows remote attackers to obtain sen... |
| CVE-2012-6312 | — | — | 3.2% | Dec 11, 2012 | Cross-site scripting (XSS) vulnerability in the Video Lead Form plugin for WordPress allows remote attackers to inject a... |
| CVE-2012-5956 | — | — | 4.1% | Dec 11, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine AssetExplorer 5.6 before service pack 5614 allow rem... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now