2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-5138 | — | — | 1.5% | Dec 4, 2012 | Google Chrome before 23.0.1271.95 does not properly handle file paths, which has unspecified impact and attack vectors. |
| CVE-2012-5137 | — | — | 2.5% | Dec 4, 2012 | Use-after-free vulnerability in Google Chrome before 23.0.1271.95 allows remote attackers to cause a denial of service o... |
| CVE-2012-5129 | — | — | 1.1% | Dec 4, 2012 | Heap-based buffer overflow in the WebGL subsystem in Google Chrome OS before 23.0.1271.94 allows remote attackers to cau... |
| CVE-2012-6065 | — | — | 1.1% | Dec 3, 2012 | The OM Maximenu module 6.x-1.43 and earlier for Drupal, when the "Title has PHP" option is enabled, allows remote authen... |
| CVE-2012-6064 | — | — | 1.4% | Dec 3, 2012 | Directory traversal vulnerability in lib/filemanager/imagemanager/images.php in CMS Made Simple (CMSMS) before 1.11.2.1 ... |
| CVE-2012-5859 | — | — | 1.6% | Dec 3, 2012 | Samsung Kies Air 2.1.207051 and 2.1.210161 allows remote attackers to cause a denial of service (crash) via a crafted re... |
| CVE-2012-5858 | — | — | 4.3% | Dec 3, 2012 | Samsung Kies Air 2.1.207051 and 2.1.210161 relies on the IP address for authentication, which allows remote man-in-the-m... |
| CVE-2012-5569 | — | — | 1.8% | Dec 3, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in the Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allow ... |
| CVE-2012-5559 | — | — | 1.8% | Dec 3, 2012 | Cross-site scripting (XSS) vulnerability in the page manager node view task in the Chaos tool suite (ctools) module 6.x-... |
| CVE-2012-5557 | — | — | 1.4% | Dec 3, 2012 | The User Read-Only module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.4 for Drupal, does not properly assign roles w... |
| CVE-2012-5556 | — | — | 0.6% | Dec 3, 2012 | Multiple cross-site request forgery (CSRF) vulnerabilities in the RESTful Web Services (RESTWS) module 7.x-1.x before 7.... |
| CVE-2012-5554 | — | — | 1.4% | Dec 3, 2012 | The default configuration for the Webform CiviCRM Integration module 7.x-3.x before 7.x-3.2 has "Enforce Permissions" di... |
| CVE-2012-5553 | — | — | 0.9% | Dec 3, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in the OM Maximenu module 6.x-1.x before 6.x-1.44 and 7.x-1.x before... |
| CVE-2012-5552 | — | — | 1.4% | Dec 3, 2012 | The Password policy module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to obtai... |
| CVE-2012-5551 | — | — | 1.2% | Dec 3, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in the MailChimp module 7.x-2.x before 7.x-2.7 for Drupal allow remo... |
| CVE-2012-5550 | — | — | 1.1% | Dec 3, 2012 | SQL injection vulnerability in the Time Spent module 6.x and 7.x for Drupal allows remote attackers to execute arbitrary... |
| CVE-2012-5549 | — | — | 0.6% | Dec 3, 2012 | Cross-site request forgery (CSRF) vulnerability in the Time Spent module 6.x and 7.x for Drupal allows remote attackers ... |
| CVE-2012-5548 | — | — | 0.9% | Dec 3, 2012 | Cross-site scripting (XSS) vulnerability in the Time Spent module 6.x and 7.x for Drupal allows remote attackers to inje... |
| CVE-2012-5547 | — | — | 0.6% | Dec 3, 2012 | Multiple cross-site request forgery (CSRF) vulnerabilities in the Search API module 7.x-1.x before 7.x-1.3 for Drupal al... |
| CVE-2012-5545 | — | — | 0.9% | Dec 3, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in the ShareThis module 7.x-2.x before 7.x-2.5 for Drupal allow remo... |
| CVE-2012-5544 | — | — | 1.1% | Dec 3, 2012 | The Mandrill module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users to obtain password reset links b... |
| CVE-2012-5543 | — | — | 1.2% | Dec 3, 2012 | The Feeds module 7.x-2.x before 7.x-2.0-alpha6 for Drupal, when a field is mapped to the node's author, does not properl... |
| CVE-2012-5542 | — | — | 0.7% | Dec 3, 2012 | Cross-site request forgery (CSRF) vulnerability in the Commerce Extra Panes module 7.x-1.x before 7.x-1.1 in Drupal allo... |
| CVE-2012-5541 | — | — | 1.2% | Dec 3, 2012 | Cross-site scripting (XSS) vulnerability in the Twitter Pull module 6.x-1.x before 6.x-1.3 and 7.x-1.x before 7.x-1.0-rc... |
| CVE-2012-5540 | — | — | 1.2% | Dec 3, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in the Hostip module 6.x-2.x before 6.x-2.2 and 7.x-2.x before 7.x-2... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now