2012 CVE Vulnerabilities

5,944 CVEs published in 2012.

CVE IDSeverityCVSSDescription
CVE-2012-5370——JRuby computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows...
CVE-2012-2739——Oracle Java SE before 7 Update 6, and OpenJDK 7 before 7u6 build 12 and 8 before build 39, computes hash values without ...
CVE-2012-5136——Google Chrome before 23.0.1271.91 does not properly perform a cast of an unspecified variable during handling of the INP...
CVE-2012-5135——Use-after-free vulnerability in Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service o...
CVE-2012-5134——Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in...
CVE-2012-5133——Use-after-free vulnerability in Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service o...
CVE-2012-5132——Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service (application crash) via a respons...
CVE-2012-5131——Google Chrome before 23.0.1271.91 on Mac OS X does not properly mitigate improper rendering behavior in the Intel GPU dr...
CVE-2012-5130——Skia, as used in Google Chrome before 23.0.1271.91, allows remote attackers to cause a denial of service (out-of-bounds ...
CVE-2012-4964——The Samsung printer firmware before 20121031 has a hardcoded read-write SNMP community, which makes it easier for remote...
CVE-2012-4615——EMC Smarts Network Configuration Manager (NCM) before 9.1 uses a hardcoded encryption key for the storage of credentials...
CVE-2012-4614——The default configuration of EMC Smarts Network Configuration Manager (NCM) before 9.1 does not require authentication f...
CVE-2012-4611——Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Adaptive Authentication On-Premise (AAOP) before 7.0 allo...
CVE-2012-6050——The winbox service in MikroTik RouterOS 5.15 and earlier allows remote attackers to cause a denial of service (CPU consu...
CVE-2012-6049——Open Solution Quick.Cart 5.0 allows remote attackers to obtain sensitive information via (1) a long string or (2) invali...
CVE-2012-6048——Guitar Pro 6.1.1 r10791 allows remote attackers to cause a denial of service (crash) via a long string in a gpx file.
CVE-2012-6047——Cross-site request forgery (CSRF) vulnerability in X7 Chat 2.0.5.1 and earlier allows remote attackers to hijack the aut...
CVE-2012-6046——Static code injection vulnerability in admin/banners.php in PHP Enter allows remote attackers to inject arbitrary PHP co...
CVE-2012-6045——Cross-site scripting (XSS) vulnerability in gb/user/index.php in Ramui Forum, possibly 1.0 Beta, allows remote attackers...
CVE-2012-6044——M-Player 0.4 allows remote attackers to cause a denial of service (crash) via a crafted MP3 file.
CVE-2012-6043——Cross-site scripting (XSS) vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbitr...
CVE-2012-6042——GPSMapEdit 1.1.73.2 allows user-assisted remote attackers to cause a denial of service (crash) via a long string in a ls...
CVE-2012-6041——Double free vulnerability in GreenBrowser before 6.0.1002, when the keyword search bar (F6) is activated, allows remote ...
CVE-2012-6040——Cross-site scripting (XSS) vulnerability in users.php in File King Advanced File Management 1.4 allows remote attackers ...
CVE-2012-6039——SQL injection vulnerability in view_comments.php in YABSoft Advanced Image Hosting (AIH) Script, possibly 2.3, allows re...

Check if your code is affected by 2012 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now