CVEs from 2012

5,229 normalized CVEs published or assigned in this year.

Total

5,229

critical

critical 963

high

high 747

medium

medium 2,885

low

low 530

% Critical

18.4%

% with KEV

0.4%

% with exploit

0.5%

Top vendors

apple 11,954
mozilla 11,832
google 7,285
adobe 6,218
oracle 3,703
opera 3,601
ibm 2,977
ffmpeg 1,890

Top products

chrome 7,005
safari 6,451
itunes 4,416
firefox 4,272
seamonkey 3,619
opera_browser 3,599
mysql 2,827
thunderbird 2,165

Top packages

PyPI/plone 61
Packagist/typo3/cms 46
Packagist/moodle/moodle 30
RubyGems/actionpack 27
RubyGems/puppet 24
Maven/org.jenkins-ci.main:jenkins-core 16
Maven/org.apache.tomcat:tomcat 15
RubyGems/activerecord 15

critical high medium low unknown

0

KEV Has exploit

CVE	Severity	CVSS	Risk	Published	Description	Impact
CVE-2012-2179	medium	—	6.9	14y ago	libodm.a in IBM AIX 5.3, 6.1, and 7.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
CVE-2012-6636	medium	—	6.8	12y ago	The Android API before 17 does not properly restrict the WebView.addJavascriptInterface method, which allows remote attackers to execute arbitrary methods of Java objects by using the Java Reflection…
CVE-2012-2996	medium	—	6.8	14y ago	Cross-site request forgery (CSRF) vulnerability in saveAccountSubTab.imss in Trend Micro InterScan Messaging Security Suite 7.1-Build_Win32_1394 allows remote attackers to hijack the authentication o…
CVE-2012-3748	medium	—	6.1	14y ago	Race condition in WebKit in Apple iOS before 6.0.1 and Safari before 6.0.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving Jav…
CVE-2012-2995	medium	—	4.3	14y ago	Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro InterScan Messaging Security Suite 7.1-Build_Win32_1394 allow remote attackers to inject arbitrary web script or HTML via (1) the wr…