2012 CVE Vulnerabilities
5,939 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-5382 | — | — | 0.9% | Oct 11, 2012 | Untrusted search path vulnerability in the installation functionality in Zend Server 5.6.0 SP4, when installed in the to... |
| CVE-2012-5381 | — | — | 0.9% | Oct 11, 2012 | Untrusted search path vulnerability in the installation functionality in PHP 5.3.17, when installed in the top-level C:\... |
| CVE-2012-5378 | — | — | 0.9% | Oct 11, 2012 | Untrusted search path vulnerability in the installation functionality in ActiveTcl 8.5.12, when installed in the top-lev... |
| CVE-2012-5377 | — | — | 1.3% | Oct 11, 2012 | Untrusted search path vulnerability in the installation functionality in ActivePerl 5.16.1.1601, when installed in the t... |
| CVE-2012-5112 | — | — | 4.6% | Oct 11, 2012 | Use-after-free vulnerability in the SVG implementation in WebKit, as used in Google Chrome before 22.0.1229.94, allows r... |
| CVE-2012-5166 | — | — | 34.2% | Oct 10, 2012 | ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4, and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4... |
| CVE-2012-4467 | — | — | 0.5% | Oct 10, 2012 | The (1) do_siocgstamp and (2) do_siocgstampns functions in net/socket.c in the Linux kernel before 3.5.4 use an incorrec... |
| CVE-2012-2286 | — | — | 0.6% | Oct 10, 2012 | Unspecified vulnerability in EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 before SP3 P3 allows remote attac... |
| CVE-2012-5356 | — | — | 2.0% | Oct 10, 2012 | The apt-add-repository tool in Ubuntu Software Properties 0.75.x before 0.75.10.3, 0.80.x before 0.80.9.2, 0.81.x before... |
| CVE-2012-5355 | — | — | 0.3% | Oct 10, 2012 | welcome.py in xdiagnose before 2.5.2ubuntu0.1 allows local users to overwrite arbitrary files via a symlink attack on a ... |
| CVE-2012-4899 | — | — | 0.3% | Oct 10, 2012 | WellinTech KingView 6.5.3 and earlier uses a weak password-hashing algorithm, which makes it easier for local users to d... |
| CVE-2012-4465 | — | — | 3.4% | Oct 10, 2012 | Heap-based buffer overflow in the substr function in parsing.c in cgit 0.9.0.3 and earlier allows remote authenticated u... |
| CVE-2012-4463 | — | — | 1.9% | Oct 10, 2012 | Midnight Commander (mc) 4.8.5 does not properly handle the (1) MC_EXT_SELECTED or (2) MC_EXT_ONLYTAGGED environment vari... |
| CVE-2012-4455 | — | — | 0.4% | Oct 10, 2012 | openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attac... |
| CVE-2012-4454 | — | — | 1.0% | Oct 10, 2012 | openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable permissions on arbit... |
| CVE-2012-4445 | — | — | 4.2% | Oct 10, 2012 | Heap-based buffer overflow in the eap_server_tls_process_fragment function in eap_server_tls_common.c in the EAP authent... |
| CVE-2012-4430 | — | — | 2.7% | Oct 10, 2012 | The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allows... |
| CVE-2012-3504 | — | — | 0.5% | Oct 10, 2012 | The nssconfigFound function in genkey.pl in crypto-utils 2.4.1-34 allows local users to overwrite arbitrary files via a ... |
| CVE-2012-3040 | — | — | 2.6% | Oct 10, 2012 | Cross-site scripting (XSS) vulnerability in the web server on Siemens SIMATIC S7-1200 PLCs 2.x through 3.0.1 allows remo... |
| CVE-2012-5354 | — | — | 1.7% | Oct 10, 2012 | Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away f... |
| CVE-2012-4188 | — | — | 14.7% | Oct 10, 2012 | Heap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, T... |
| CVE-2012-4187 | — | — | 6.8% | Oct 10, 2012 | Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8... |
| CVE-2012-4186 | — | — | 14.7% | Oct 10, 2012 | Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox before 16.0, Firefox ESR 10.... |
| CVE-2012-4185 | — | — | 8.6% | Oct 10, 2012 | Buffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thu... |
| CVE-2012-4184 | — | — | 1.8% | Oct 10, 2012 | The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbi... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now