2012 CVE Vulnerabilities

5,944 CVEs published in 2012.

CVE IDSeverityCVSSDescription
CVE-2012-6038——admin/core/admin_func.php in razorCMS before 1.2.1 does not properly restrict access to certain administrator directorie...
CVE-2012-5520——The send_to_sourcefire function in manage_sql.c in OpenVAS Manager 3.x before 3.0.4 allows remote attackers to execute a...
CVE-2012-2438——ar web content manager (AWCM) 2.2 does not restrict the number of comment records that can be submitted through HTTP req...
CVE-2012-2437——cookie_gen.php in ar web content manager (AWCM) 2.2 does not require authentication, which allows remote attackers to ge...
CVE-2012-0698——tcsd in TrouSerS before 0.3.10 allows remote attackers to cause a denial of service (daemon crash) via a crafted type_of...
CVE-2012-6037——Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4, and other versi...
CVE-2012-5533——The http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote attackers to cause a denial o...
CVE-2012-4538——The HVMOP_pagetable_dying hypercall in Xen 4.0, 4.1, and 4.2 does not properly check the pagetable state when running on...
CVE-2012-4522——The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r37163 allows context...
CVE-2012-3433——Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by ...
CVE-2012-2253——Cross-site scripting (XSS) vulnerability in group/members.php in Mahara 1.5.x before 1.5.7 and 1.6.x before 1.6.2 allows...
CVE-2012-2247——Cross-site scripting (XSS) vulnerability in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to ...
CVE-2012-2246——Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbit...
CVE-2012-2244——Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote authenticated administrators to execute arbitrary program...
CVE-2012-2243——Cross-site scripting (XSS) vulnerability in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to ...
CVE-2012-2239CRITICAL9.1Mahara 1.4.x before 1.4.4 and 1.5.x before 1.5.3 allows remote attackers to read arbitrary files or create TCP connectio...
CVE-2012-0960——Unity integration extension (unity-firefox-extension) before 2.4.1 for Firefox does not properly handle callbacks, which...
CVE-2012-0959——Remote Login Service (RLS) 1.0.0 does not properly clear account information when switching users, which might allow phy...
CVE-2012-6036——The (1) memc_save_get_next_page, (2) tmemc_restore_put_page and (3) tmemc_restore_flush_page functions in the Transcende...
CVE-2012-6035——The do_tmem_destroy_pool function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does not properly validate ...
CVE-2012-6034——The (1) tmemc_save_get_next_page and (2) tmemc_save_get_next_inv functions and the (3) TMEMC_SAVE_GET_POOL_UUID sub-oper...
CVE-2012-6033——The do_tmem_control function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does not properly check privileg...
CVE-2012-6032——Multiple integer overflows in the (1) tmh_copy_from_client and (2) tmh_copy_to_client functions in the Transcendent Memo...
CVE-2012-6031——The do_tmem_get function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause ...
CVE-2012-6030——The do_tmem_op function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a...

Check if your code is affected by 2012 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now