2012 CVE Vulnerabilities
5,944 CVEs published in 2012.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2012-5294 | — | — | 1.1% | Oct 4, 2012 | SQL injection vulnerability in art_detalle.php in MyStore Xpress Tienda Virtual allows remote attackers to execute arbit... |
| CVE-2012-5293 | — | — | 2.7% | Oct 4, 2012 | Multiple PHP remote file inclusion vulnerabilities in SAPID CMS 1.2.3 Stable allow remote attackers to execute arbitrary... |
| CVE-2012-5292 | — | — | 1.1% | Oct 4, 2012 | Multiple SQL injection vulnerabilities in Atar2b CMS 4.0.1 allow remote attackers to execute arbitrary SQL commands via ... |
| CVE-2012-5291 | — | — | 1.1% | Oct 4, 2012 | SQL injection vulnerability in team.php in Posse Softball Director CMS allows remote attackers to execute arbitrary SQL ... |
| CVE-2012-5290 | — | — | 1.2% | Oct 4, 2012 | Multiple SQL injection vulnerabilities in EasyWebRealEstate allow remote attackers to execute arbitrary SQL commands via... |
| CVE-2012-5289 | — | — | 1.3% | Oct 4, 2012 | Multiple SQL injection vulnerabilities in Plogger 1.0 RC1 allow remote attackers to execute arbitrary SQL commands via t... |
| CVE-2012-5288 | — | — | 1.1% | Oct 4, 2012 | SQL injection vulnerability in page.php in phpMyDirectory 1.3.3 allows remote attackers to execute arbitrary SQL command... |
| CVE-2012-3819 | — | — | 2.3% | Oct 4, 2012 | Stack consumption vulnerability in dartwebserver.dll 1.9 and earlier, as used in Dart PowerTCP WebServer for ActiveX and... |
| CVE-2012-3267 | — | — | 4.2% | Oct 4, 2012 | Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.20 allows remote attackers to obtain sensitive informati... |
| CVE-2012-3511 | — | — | 0.4% | Oct 4, 2012 | Multiple race conditions in the madvise_remove function in mm/madvise.c in the Linux kernel before 3.4.5 allow local use... |
| CVE-2012-5239 | — | — | — | Oct 3, 2012 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-3548. Reason: This candidate is a reservation ... |
| CVE-2012-3488 | — | — | 3.3% | Oct 3, 2012 | The libxslt support in contrib/xml2 in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before... |
| CVE-2012-3520 | — | — | 0.4% | Oct 3, 2012 | The Netlink implementation in the Linux kernel before 3.2.30 does not properly handle messages that lack SCM_CREDENTIALS... |
| CVE-2012-3510 | — | — | 0.5% | Oct 3, 2012 | Use-after-free vulnerability in the xacct_add_tsk function in kernel/tsacct.c in the Linux kernel before 2.6.19 allows l... |
| CVE-2012-3430 | — | — | 1.0% | Oct 3, 2012 | The rds_recvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure mem... |
| CVE-2012-3412 | — | — | 6.2% | Oct 3, 2012 | The sfc (aka Solarflare Solarstorm) driver in the Linux kernel before 3.2.30 allows remote attackers to cause a denial o... |
| CVE-2012-3400 | — | — | 8.8% | Oct 3, 2012 | Heap-based buffer overflow in the udf_load_logicalvol function in fs/udf/super.c in the Linux kernel before 3.4.5 allows... |
| CVE-2012-3375 | — | — | 1.0% | Oct 3, 2012 | The epoll_ctl system call in fs/eventpoll.c in the Linux kernel before 3.2.24 does not properly handle ELOOP errors in E... |
| CVE-2012-3314 | — | — | 0.8% | Oct 2, 2012 | IBM Tivoli Federated Identity Manager (TFIM) and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1, 6.2.... |
| CVE-2012-3266 | — | — | 2.2% | Oct 2, 2012 | Unspecified vulnerability in IBRIX 6.1.196 through 6.1.251 on HP IBRIX X9000 Storage allows remote attackers to obtain s... |
| CVE-2012-0692 | — | — | 0.4% | Oct 2, 2012 | CA License (aka CA Licensing) before 1.90.03 allows local users to modify or create arbitrary files, and consequently ga... |
| CVE-2012-0691 | — | — | 0.3% | Oct 2, 2012 | CA License (aka CA Licensing) before 1.90.03 does not properly restrict system commands, which allows local users to gai... |
| CVE-2012-5234 | — | — | 1.0% | Oct 1, 2012 | Open redirect vulnerability in index.php in ocPortal before 7.1.6 allows remote attackers to redirect users to arbitrary... |
| CVE-2012-4242 | — | — | 8.9% | Oct 1, 2012 | Cross-site scripting (XSS) vulnerability in the MF Gig Calendar plugin 0.9.2 for WordPress allows remote attackers to in... |
| CVE-2012-4065 | — | — | 1.0% | Oct 1, 2012 | Eucalyptus before 3.1.1 does not properly restrict the binding of external SOAP web-services messages, which allows remo... |
Check if your code is affected by 2012 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now