Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: December 2012

32 records · 2 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2012-5611
    33Monitor

    Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions

    MediumCVSS 6.5Proof of conceptEPSS 23%

    oracle · mysqlDec 3, 2012

  • CVE-2012-5612
    32Monitor

    Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows

    MediumCVSS 6.5Proof of conceptEPSS 20%

    mariadb · mariadbDec 3, 2012

  • CVE-2012-5613
    40Plan

    MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the FILE privilege to u

    MediumCVSS 6.0WeaponizedEPSS 31%

    mariadb · mariadbDec 3, 2012

  • CVE-2012-5614
    20Monitor

    Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users t

    MediumCVSS 4.0Proof of conceptEPSS 13%

    oracle · mysqlDec 3, 2012

  • CVE-2012-5615
    24Monitor

    Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates dif

    MediumCVSS 5.0Proof of conceptEPSS 14%

    mariadb · mariadbDec 3, 2012

  • CVE-2012-5975
    48Plan

    The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6.2.0 through 6.2.5, and 6.3.0 thro

    CriticalCVSS 9.3WeaponizedEPSS 35%

    ssh · tectia serverDec 4, 2012

  • CVE-2012-6066
    49Plan

    freeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a crafted session, as demonstrated by an OpenSSH

    CriticalCVSS 9.3WeaponizedEPSS 39%

    freesshd · freesshdDec 4, 2012

  • CVE-2012-4347
    40Plan

    Multiple directory traversal vulnerabilities in the management console in Symantec Messaging Gateway (SMG) 9.5.x allow remote authenticated

    MediumCVSS 5.0WeaponizedEPSS 58%

    symantec · messaging gatewayDec 5, 2012

  • CVE-2011-2730
    34Monitor

    VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before 3.0.6, when a container supports Expression Language (E

    HighCVSS 7.5No exploitEPSS 11%

    springsource · spring frameworkDec 5, 2012

  • CVE-2012-3274
    59Plan

    Stack-based buffer overflow in uam.exe in the User Access Manager (UAM) component in HP Intelligent Management Center (IMC) before 5.1 E0101

    CriticalCVSS 10.0WeaponizedEPSS 63%

    hp · intelligent management centerDec 6, 2012

  • CVE-2012-3275
    43Plan

    Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.1x and 9.20 allows remote attackers to execute arbitrary code via unknown ve

    CriticalCVSS 10.0No exploitEPSS 10%

    hp · network node manager iDec 6, 2012

  • CVE-2012-5688
    34Monitor

    ISC BIND 9.8.x before 9.8.4-P1 and 9.9.x before 9.9.2-P1, when DNS64 is enabled, allows remote attackers to cause a denial of service (asser

    HighCVSS 7.8No exploitEPSS 10%

    isc · bindDec 6, 2012

  • CVE-2012-6301
    40Plan

    The Browser application in Android 4.0.3 allows remote attackers to cause a denial of service (application crash) via a crafted market: URI

    MediumCVSS 5.0WeaponizedEPSS 6%

    google · androidDec 10, 2012

  • CVE-2012-1537
    44Plan

    Heap-based buffer overflow in DirectPlay in DirectX 9.0 through 11.1 in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows V

    CriticalCVSS 9.3No exploitEPSS 22%

    microsoft · directxDec 11, 2012

  • CVE-2012-2539
    77This week

    Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 al

    HighCVSS 7.8KEVWeaponizedEPSS 53%

    microsoft · office compatibility packDec 11, 2012

  • CVE-2012-2556
    43Plan

    The OpenType Font (OTF) driver in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, W

    CriticalCVSS 9.3No exploitEPSS 20%

    microsoft · windows 2003 serverDec 11, 2012

  • CVE-2012-4774
    43Plan

    Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold an

    CriticalCVSS 9.3No exploitEPSS 20%

    microsoft · windows 7Dec 11, 2012

  • CVE-2012-4781
    43Plan

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web

    CriticalCVSS 9.3No exploitEPSS 18%

    microsoft · internet explorerDec 11, 2012

  • CVE-2012-4782
    45Plan

    Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web sit

    CriticalCVSS 9.3No exploitEPSS 25%

    microsoft · internet explorerDec 11, 2012

  • CVE-2012-4786
    47Plan

    The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2

    CriticalCVSS 10.0No exploitEPSS 24%

    microsoft · windows 7Dec 11, 2012

  • CVE-2012-4787
    41Plan

    Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web sit

    CriticalCVSS 9.0No exploitEPSS 17%

    microsoft · internet explorerDec 11, 2012

  • CVE-2012-4791
    18Monitor

    Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service (Information Store se

    LowCVSS 3.5No exploitEPSS 13%

    microsoft · exchange serverDec 11, 2012

  • CVE-2012-5525
    40Plan

    The get_page_from_gfn hypercall function in Xen 4.2 allows local PV guest OS administrators to cause a denial of service (crash) via a craft

    MediumCVSS 4.7WeaponizedEPSS 1%

    xen · xenDec 13, 2012

  • CVE-2012-6422
    42Plan

    The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor,

    CriticalCVSS 9.3Proof of conceptEPSS 15%

    meizu · mxDec 17, 2012

  • CVE-2012-3546
    21Monitor

    org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows

    MediumCVSS 4.3No exploitEPSS 11%

    apache · tomcatDec 19, 2012

  • CVE-2012-5691
    53Plan

    Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrar

    CriticalCVSS 9.3WeaponizedEPSS 52%

    realnetworks · realplayerDec 19, 2012

  • CVE-2012-5469
    37Monitor

    The Portable phpMyAdmin plugin before 1.3.1 for WordPress allows remote attackers to bypass authentication and obtain phpMyAdmin console acc

    HighCVSS 7.5Proof of conceptEPSS 23%

    phpmyadmin · phpmyadminDec 20, 2012

  • CVE-2012-5643
    27Monitor

    Multiple memory leaks in tools/cachemgr.cc in cachemgr.cgi in Squid 2.x and 3.x before 3.1.22, 3.2.x before 3.2.4, and 3.3.x before 3.3.0.2

    MediumCVSS 5.0No exploitEPSS 23%

    squid-cache · squidDec 20, 2012

  • CVE-2012-5932
    59Plan

    Eval injection vulnerability in the ldapagnt_eval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1

    CriticalCVSS 10.0WeaponizedEPSS 62%

    microfocus · privileged user managerDec 24, 2012

  • CVE-2012-0432
    58Plan

    Stack-based buffer overflow in the Novell NCP implementation in NetIQ eDirectory 8.8.7.x before 8.8.7.2 allows remote attackers to have an u

    CriticalCVSS 10.0WeaponizedEPSS 58%

    microfocus · edirectoryDec 25, 2012

  • CVE-2012-4528
    24Monitor

    The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver arbitrary POST data to

    MediumCVSS 5.0Proof of conceptEPSS 12%

    trustwave · modsecurityDec 28, 2012

  • CVE-2012-4792
    89Now

    Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web

    HighCVSS 8.8KEVWeaponizedEPSS 78%

    microsoft · internet explorerDec 30, 2012