Skip to content
OpenAdvisories

Archive

December 2012

Vulnerabilities first published in this month (UTC), newest first.

← November 2012 2012 / December January 2013 →
  1. 1 
  2. 2 
  3. 338
  4. 46
  5. 524
  6. 67
  7. 7 
  8. 85
  9. 9 
  10. 102
  11. 114
  12. 1226
  13. 1315
  14. 14 
  15. 15 
  16. 16 
  17. 17 
  18. 1818
  19. 1918
  20. 2010
  21. 2120
  22. 22 
  23. 233
  24. 245
  25. 254
  26. 2624
  27. 275
  28. 2810
  29. 29 
  30. 301
  31. 3110
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.5
    CVE-2012-4688

    I-GEN opLYNX Central Authentication Bypass

    The Central application in i-GEN opLYNX before 2.01.9 allows remote attackers to bypass authentication via vectors involving the disabling of browser JavaScript support.

    i-GEN Solutions opLYNX
  • High 8.8
    CVE-2012-4792 Exploited Public exploit EPSS 79%

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary co…

    KEV Jul 23, 2024
  • High 7.8
    CVE-2012-6427

    Carlo Gavazzi EOS Box SQL Injection

    The Carlo Gavazzi EOS-Box does not check the validity of the data before executing queries. By accessing the SQL table of certain pages that do not require authentication, attackers can leak information from the device. This could allow the attacker to compro…

    Carlo Gavazzi Automation EOS-Box
  • High 7.8
    CVE-2012-2539 Exploited EPSS 53%

    Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office…

    KEV Mar 28, 2022
  • High 7.6
    CVE-2012-4687

    Post Oak Bluetooth Traffic Systems Insufficient Entropy

    Post Oak AWAM Bluetooth Reader Traffic System does not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof a device by predicting a key value.

    Post Oak Traffic Systems AWAM Bluetooth Reader Traffic System
  • High —
    CVE-2011-2730 EPSS 12%

    Improper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework

    VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before 3.0.6, when a container supports Expression Language (EL), evaluates EL expressions in tags twice, which allows remote attackers to obtain sensitive information via a (1) nam…

    org.springframework:spring-core Maven