2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-4602 | — | — | 1.8% | Nov 23, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in admin/code/tce_select_users_popup.php in Nicola Asuni TCExam befo... |
| CVE-2012-4601 | — | — | 1.6% | Nov 23, 2012 | Multiple SQL injection vulnerabilities in Nicola Asuni TCExam before 11.3.009 allow remote authenticated users with leve... |
| CVE-2012-4411 | — | — | 0.4% | Nov 23, 2012 | The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain sensitive host resource inf... |
| CVE-2012-3516 | — | — | 0.4% | Nov 23, 2012 | The GNTTABOP_swap_grant_ref sub-operation in the grant table hypercall in Xen 4.2 and Citrix XenServer 6.0.2 allows loca... |
| CVE-2012-3515 | — | — | 0.5% | Nov 23, 2012 | Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend... |
| CVE-2012-3498 | — | — | 0.4% | Nov 23, 2012 | PHYSDEVOP_map_pirq in Xen 4.1 and 4.2 and Citrix XenServer 6.0.2 and earlier allows local HVM guest OS kernels to cause ... |
| CVE-2012-3497 | — | — | 0.4% | Nov 23, 2012 | (1) TMEMC_SAVE_GET_CLIENT_WEIGHT, (2) TMEMC_SAVE_GET_CLIENT_CAP, (3) TMEMC_SAVE_GET_CLIENT_FLAGS and (4) TMEMC_SAVE_END ... |
| CVE-2012-3496 | — | — | 0.4% | Nov 23, 2012 | XENMEM_populate_physmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when translating paging mode i... |
| CVE-2012-3495 | — | — | 0.4% | Nov 23, 2012 | The physdev_get_free_pirq hypercall in arch/x86/physdev.c in Xen 4.1.x and Citrix XenServer 6.0.2 and earlier uses the r... |
| CVE-2012-3494 | — | — | 0.4% | Nov 23, 2012 | The set_debugreg hypercall in include/asm-x86/debugreg.h in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlie... |
| CVE-2012-3431 | — | — | 1.8% | Nov 23, 2012 | The Teiid Java Database Connectivity (JDBC) socket, as used in JBoss Enterprise Data Services Platform before 5.3.0, doe... |
| CVE-2012-2377 | — | — | 1.4% | Nov 23, 2012 | JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platfo... |
| CVE-2012-2086 | — | — | 2.4% | Nov 23, 2012 | SQL injection vulnerability in the get_last_conversation_lines function in common/logger.py in Gajim before 0.15 allows ... |
| CVE-2012-1167 | — | — | 1.6% | Nov 23, 2012 | The JBoss Server in JBoss Enterprise Application Platform 5.1.x before 5.1.2 and 5.2.x before 5.2.2, Web Platform before... |
| CVE-2012-0818 | — | — | 3.2% | Nov 23, 2012 | RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document... |
| CVE-2012-5864 | — | — | 4.9% | Nov 23, 2012 | These Sinapsi devices do not check if users that visit pages within the device have properly authenticated. By directl... |
| CVE-2012-5863 | — | — | 24.8% | Nov 23, 2012 | These Sinapsi devices do not check for special elements in commands sent to the system. By accessing certain pages with... |
| CVE-2012-5862 | — | — | 11.9% | Nov 23, 2012 | These Sinapsi devices store hard-coded passwords in the PHP file of the device. By using the hard-coded passwords in th... |
| CVE-2012-5861 | — | — | 4.1% | Nov 23, 2012 | These Sinapsi devices do not check the validity of the data before executing queries. By accessing the SQL table of cer... |
| CVE-2012-5759 | — | — | 2.2% | Nov 23, 2012 | The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2 allows remote authenticat... |
| CVE-2012-5758 | — | — | 2.4% | Nov 23, 2012 | The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2 does not require authenti... |
| CVE-2012-5756 | — | — | 1.3% | Nov 23, 2012 | The IBM WebSphere DataPower XC10 Appliance 2.0.0.0 through 2.0.0.3 and 2.1.0.0 through 2.1.0.2, when a collective config... |
| CVE-2012-5173 | — | — | 1.3% | Nov 23, 2012 | Session fixation vulnerability in BIGACE before 2.7.8 allows remote attackers to hijack web sessions via unspecified vec... |
| CVE-2012-2211 | — | — | 1.2% | Nov 22, 2012 | Cross-site scripting (XSS) vulnerability in phpgwapi/inc/common_functions_inc.php in eGroupware before 1.8.004.20120405 ... |
| CVE-2012-2084 | — | — | 2.3% | Nov 22, 2012 | Cross-site scripting (XSS) vulnerability in the Printer, email and PDF versions module 6.x-1.x before 6.x-1.15 and 7.x-1... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now