2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-4990 | — | — | 2.3% | Oct 22, 2012 | SQL injection vulnerability in admin/campaign-zone-link.php in OpenX 2.8.10 before revision 81823 allows remote attacker... |
| CVE-2012-4989 | — | — | 4.4% | Oct 22, 2012 | Cross-site scripting (XSS) vulnerability in admin/plugin-index.php in OpenX 2.8.10 before revision 81823 allows remote a... |
| CVE-2012-4773 | — | — | 3.5% | Oct 22, 2012 | Multiple cross-site request forgery (CSRF) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to hijack ... |
| CVE-2012-4772 | — | — | 3.7% | Oct 22, 2012 | SQL injection vulnerability in register/ in Subrion CMS before 2.2.3 allows remote attackers to execute arbitrary SQL co... |
| CVE-2012-4771 | — | — | 4.4% | Oct 22, 2012 | Multiple cross-site scripting (XSS) vulnerabilities in Subrion CMS before 2.2.3 allow remote attackers to inject arbitra... |
| CVE-2012-4518 | — | — | 0.4% | Oct 22, 2012 | ibacm 1.0.7 creates files with world-writable permissions, which allows local users to overwrite the ib_acm daemon log o... |
| CVE-2012-4517 | — | — | 2.8% | Oct 22, 2012 | ibacm before 1.0.6 does not properly manage reference counts for multicast connections, which allows remote attackers to... |
| CVE-2012-4516 | — | — | 2.1% | Oct 22, 2012 | librdmacm 1.0.16, when ibacm.port is not specified, connects to port 6125, which allows remote attackers to specify the ... |
| CVE-2012-4511 | — | — | 1.8% | Oct 22, 2012 | services/flickr/flickr.c in libsocialweb before 0.25.21 automatically connects to Flickr when no Flickr account is set, ... |
| CVE-2012-4507 | — | — | 2.8% | Oct 22, 2012 | The strchr function in procmime.c in Claws Mail (aka claws-mail) 3.8.1 allows remote attackers to cause a denial of serv... |
| CVE-2012-4506 | — | — | 2.1% | Oct 22, 2012 | Directory traversal vulnerability in gitolite 3.x before 3.1, when wild card repositories and a pattern matching "../" a... |
| CVE-2012-4436 | — | — | 0.7% | Oct 22, 2012 | Buffer overflow in the run_last_args function in client/fwknop.c in fwknop before 2.0.3, when processing --last, might a... |
| CVE-2012-4435 | — | — | 2.3% | Oct 22, 2012 | fwknop before 2.0.3 does not properly validate IP addresses, which allows remote authenticated users to cause a denial o... |
| CVE-2012-4406 | CRITICAL | 9.8 | 6.5% | Oct 22, 2012 | OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing ... |
| CVE-2012-4232 | — | — | 2.0% | Oct 22, 2012 | SQL injection vulnerability in admin/index.php in jCore before 1.0pre2 allows remote attackers to execute arbitrary SQL ... |
| CVE-2012-4231 | — | — | 4.3% | Oct 22, 2012 | Cross-site scripting (XSS) vulnerability in admin/index.php in jCore before 1.0pre2 allows remote attackers to inject ar... |
| CVE-2012-3466 | — | — | 0.5% | Oct 22, 2012 | GNOME gnome-keyring 3.4.0 through 3.4.1, when gpg-cache-method is set to "idle" or "timeout," does not properly limit th... |
| CVE-2012-2679 | — | — | 0.4% | Oct 22, 2012 | Red Hat Network (RHN) Configuration Client (rhncfg-client) in rhncfg before 5.10.27-8 uses weak permissions (world-reada... |
| CVE-2012-1900 | — | — | 2.6% | Oct 22, 2012 | Cross-site request forgery (CSRF) vulnerability in admin/index.php in RazorCMS 1.2.1 and earlier allows remote attackers... |
| CVE-2012-1154 | — | — | 2.6% | Oct 22, 2012 | mod_cluster 1.0.10 before 1.0.10 CP03 and 1.1.x before 1.1.4, as used in JBoss Enterprise Application Platform 5.1.2, wh... |
| CVE-2012-4751 | — | — | 5.8% | Oct 22, 2012 | Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.15, 3.0.x befor... |
| CVE-2012-3001 | — | — | 27.3% | Oct 22, 2012 | Mutiny Standard before 4.5-1.12 allows remote attackers to execute arbitrary commands via the network-interface menu, re... |
| CVE-2012-4933 | — | — | 44.0% | Oct 20, 2012 | The rtrlet web application in the Web Console in Novell ZENworks Asset Management (ZAM) 7.5 uses a hard-coded username o... |
| CVE-2012-2167 | — | — | 2.7% | Oct 20, 2012 | The IBM XIV Storage System Gen3 before 11.1.0.a allows remote attackers to cause a denial of service (device outage) via... |
| CVE-2012-4845 | — | — | 1.6% | Oct 20, 2012 | The FTP client in IBM AIX 6.1 and 7.1, and VIOS 2.2.1.4-FP-25 SP-02, does not properly manage privileges in an RBAC envi... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now