2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-5539 | — | — | 1.0% | Dec 3, 2012 | The Organic Groups (OG) module 7.x-1.x before 7.x-1.5 for Drupal does not properly maintain pending group memberships, w... |
| CVE-2012-5538 | — | — | 0.9% | Dec 3, 2012 | Cross-site scripting (XSS) vulnerability in the FileField Sources module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1... |
| CVE-2012-5537 | — | — | 1.1% | Dec 3, 2012 | The Simplenews Scheduler module 6.x-2.x before 6.x-2.4 for Drupal allows remote authenticated users with the "send sched... |
| CVE-2012-5534 | — | — | 4.4% | Dec 3, 2012 | The hook_process function in the plugin API for WeeChat 0.3.0 through 0.3.9.1 allows remote attackers to execute arbitra... |
| CVE-2012-5450 | — | — | 0.9% | Dec 3, 2012 | Cross-site request forgery (CSRF) vulnerability in lib/filemanager/imagemanager/images.php in CMS Made Simple (CMSMS) 1.... |
| CVE-2012-5367 | — | — | 1.3% | Dec 3, 2012 | Multiple SQL injection vulnerabilities in OrangeHRM 2.7.1 RC 1 allow remote authenticated administrators to execute arbi... |
| CVE-2012-3432 | — | — | 0.6% | Dec 3, 2012 | The handle_mmio function in arch/x86/hvm/io.c in the MMIO operations emulator for Xen 3.3 and 4.x, when running an HVM g... |
| CVE-2012-2934 | — | — | 0.5% | Dec 3, 2012 | Xen 4.0, and 4.1, when running a 64-bit PV guest on "older" AMD CPUs, does not properly protect against a certain AMD pr... |
| CVE-2012-1599 | — | — | 1.0% | Dec 3, 2012 | Joomla! 1.5.x before 1.5.26 does not properly check permissions, which allows attackers to obtain sensitive "administrat... |
| CVE-2012-1598 | — | — | 1.3% | Dec 3, 2012 | Joomla! 1.5.x before 1.5.26 has unspecified impact and attack vectors related to "insufficient randomness" and a "passwo... |
| CVE-2012-0218 | — | — | 0.4% | Dec 3, 2012 | Xen 3.4, 4.0, and 4.1, when the guest OS has not registered a handler for a syscall or sysenter instruction, does not pr... |
| CVE-2012-5615 | — | — | 14.8% | Dec 3, 2012 | Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other ver... |
| CVE-2012-5614 | — | — | 13.2% | Dec 3, 2012 | Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote a... |
| CVE-2012-5613 | — | — | 31.7% | Dec 3, 2012 | MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the... |
| CVE-2012-5612 | — | — | 20.8% | Dec 3, 2012 | Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly ot... |
| CVE-2012-5611 | — | — | 24.6% | Dec 3, 2012 | Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53... |
| CVE-2012-5579 | — | — | — | Dec 3, 2012 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-5611. Reason: This candidate is a duplicate of... |
| CVE-2012-6063 | — | — | 3.6% | Nov 30, 2012 | Double free vulnerability in the sftp_mkdir function in sftp.c in libssh before 0.5.3 allows remote attackers to cause a... |
| CVE-2012-4571 | — | — | 0.4% | Nov 30, 2012 | Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, whi... |
| CVE-2012-4562 | — | — | 12.8% | Nov 30, 2012 | Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or ... |
| CVE-2012-4561 | — | — | 4.8% | Nov 30, 2012 | The (1) publickey_make_dss, (2) publickey_make_rsa, (3) signature_from_string, (4) ssh_do_sign, and (5) ssh_sign_session... |
| CVE-2012-4560 | — | — | 6.5% | Nov 30, 2012 | Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (crash) or possibly... |
| CVE-2012-4559 | — | — | 5.2% | Nov 30, 2012 | Multiple double free vulnerabilities in the (1) agent_sign_data function in agent.c, (2) channel_request function in cha... |
| CVE-2012-4551 | — | — | 1.9% | Nov 30, 2012 | Use-after-free vulnerability in libunity-webapps before 2.4.1 allows remote attackers to cause a denial of service (memo... |
| CVE-2012-4479 | — | — | 1.1% | Nov 30, 2012 | SQL injection vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to execute arbitrar... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now