| | CVE-2012-1895 |  Microsoft | critical | 9.3 | 9.3%
| | The reflection implementation in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4 do… | Nov 14, 2012 | Apr 29, 2026 |
| | CVE-2012-1887 | Microsoft | critical | 9.3 | 58.3%
| | Use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and Office… | Nov 14, 2012 | Apr 29, 2026 |
| | CVE-2012-1886 | Microsoft | critical | 9.3 | 62.1%
| | Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Excel Viewer; and Office Compatibility Pac… | Nov 14, 2012 | Apr 29, 2026 |
| | CVE-2012-1885 | Microsoft | critical | 9.3 | 65.9%
| | Heap-based buffer overflow in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Office 2008 … | Nov 14, 2012 | Apr 29, 2026 |
| | CVE-2012-1539 | Microsoft | high | 8.1 | 19.0%
| | Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arb… | Nov 14, 2012 | Apr 29, 2026 |
| | CVE-2012-1538 | Microsoft | critical | 9.3 | 14.2%
| | Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arb… | Nov 14, 2012 | Apr 29, 2026 |
| | CVE-2012-5424 |  Cisco | medium | 5.0 | 0.4%
| | Cisco Secure Access Control System (ACS) 5.x before 5.2 Patch 11 and 5.3 before 5.3 Patch 7, when a … | Nov 7, 2012 | Apr 29, 2026 |
| | CVE-2012-3270 |  HPE | critical | 10.0 | 3.3%
| | Unspecified vulnerability in HP Performance Insight 5.31, 5.40, and 5.41, when Sybase is used, allow… | Nov 7, 2012 | Apr 29, 2026 |
| | CVE-2012-3269 | HPE | high | 7.5 | 1.7%
| | Unspecified vulnerability in HP Performance Insight 5.31, 5.40, and 5.41, when Sybase is used, allow… | Nov 7, 2012 | Apr 29, 2026 |
| | CVE-2012-5786 |  Apache | medium | 5.8 | 0.1%
| | The wsdl_first_https sample code in distribution/src/main/release/samples/wsdl_first_https/src/main/… | Nov 4, 2012 | Apr 29, 2026 |
| | CVE-2012-5785 | Apache | medium | 5.8 | 0.5%
| | Apache Axis2/Java 1.6.2 and earlier does not verify that the server hostname matches a domain name i… | Nov 4, 2012 | Apr 29, 2026 |
| | CVE-2012-5784 | Apache | medium | 5.8 | 1.6%
| | Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional I… | Nov 4, 2012 | Apr 29, 2026 |
| | CVE-2012-5783 | Apache | medium | 5.8 | 0.6%
| | Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK a… | Nov 4, 2012 | Apr 29, 2026 |
| | CVE-2012-3446 | Apache | medium | 5.9 | 0.3%
| | Apache Libcloud before 0.11.1 uses an incorrect regular expression during verification of whether th… | Nov 4, 2012 | Apr 29, 2026 |
| | CVE-2012-5417 | Cisco | critical | 10.0 | 2.5%
| | Cisco Prime Data Center Network Manager (DCNM) before 6.1(1) does not properly restrict access to ce… | Nov 2, 2012 | Apr 29, 2026 |
| | CVE-2012-5416 | Cisco | high | 7.8 | 0.6%
| | Buffer overflow in Cisco Unified MeetingPlace Web Conferencing before 7.1MR1 Patch 1, 8.0 before 8.0… | Nov 2, 2012 | Apr 29, 2026 |
| | CVE-2012-4501 | Apache | critical | 10.0 | 2.7%
| | Citrix Cloud.com CloudStack, and Apache CloudStack pre-release, allows remote attackers to make arbi… | Oct 26, 2012 | Apr 29, 2026 |
| | CVE-2012-3941 | Cisco | critical | 9.3 | 7.7%
| | Heap-based buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 … | Oct 25, 2012 | Apr 29, 2026 |
| | CVE-2012-3940 | Cisco | critical | 9.3 | 8.2%
| | Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 bef… | Oct 25, 2012 | Apr 29, 2026 |
| | CVE-2012-3939 | Cisco | critical | 9.3 | 4.7%
| | Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 bef… | Oct 25, 2012 | Apr 29, 2026 |
| | CVE-2012-3938 | Cisco | critical | 9.3 | 8.2%
| | Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 bef… | Oct 25, 2012 | Apr 29, 2026 |
| | CVE-2012-3937 | Cisco | critical | 9.3 | 8.2%
| | Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 bef… | Oct 25, 2012 | Apr 29, 2026 |
| | CVE-2012-3936 | Cisco | critical | 9.3 | 8.2%
| | Buffer overflow in the Cisco WebEx Recording Format (WRF) player T27 before LD SP32 EP10 and T28 bef… | Oct 25, 2012 | Apr 29, 2026 |
| | CVE-2012-5672 | Microsoft | medium | 4.3 | 16.0%
| | Microsoft Excel Viewer (aka Xlview.exe) and Excel in Microsoft Office 2007 (aka Office 12) allow rem… | Oct 25, 2012 | Apr 29, 2026 |
| | CVE-2012-3506 | Apache | critical | 10.0 | 0.8%
| | Unspecified vulnerability in the Apache Open For Business Project (aka OFBiz) 10.04.x before 10.04.0… | Oct 25, 2012 | Apr 29, 2026 |
| | CVE-2012-2284 | Microsoft | low | 2.1 | 0.1%
| | The (1) install and (2) upgrade processes in EMC NetWorker Module for Microsoft Applications (NMM) 2… | Oct 18, 2012 | Apr 29, 2026 |
| | CVE-2012-3163 |  F5 | critical | 9.0 | 1.0%
| | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.… | Oct 17, 2012 | Apr 29, 2026 |
| | CVE-2012-5351 | Apache | medium | 6.4 | 0.3%
| | Apache Axis2 allows remote attackers to forge messages and bypass authentication via a SAML assertio… | Oct 9, 2012 | Apr 29, 2026 |
| | CVE-2012-4418 | Apache | medium | 5.8 | 0.3%
| | Apache Axis2 allows remote attackers to forge messages and bypass authentication via an "XML Signatu… | Oct 9, 2012 | Apr 29, 2026 |
| | CVE-2012-2552 | Microsoft | medium | 4.3 | 44.4%
| | Cross-site scripting (XSS) vulnerability in the SQL Server Report Manager in Microsoft SQL Server 20… | Oct 9, 2012 | Apr 29, 2026 |
| | CVE-2012-2550 | Microsoft | critical | 9.3 | 66.7%
| | Microsoft Works 9 allows remote attackers to execute arbitrary code or cause a denial of service (he… | Oct 9, 2012 | Apr 29, 2026 |
| | CVE-2012-2528 | Microsoft | critical | 9.3 | 56.9%
| | Use-after-free vulnerability in Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer… | Oct 9, 2012 | Apr 29, 2026 |
| | CVE-2012-2520 | Microsoft | medium | 4.3 | 24.2%
| | Cross-site scripting (XSS) vulnerability in Microsoft InfoPath 2007 SP2 and SP3 and 2010 SP1, Commun… | Oct 9, 2012 | Apr 29, 2026 |
| | CVE-2012-0182 | Microsoft | critical | 9.3 | 50.3%
| | Microsoft Word 2007 SP2 and SP3 does not properly handle memory during the parsing of Word documents… | Oct 9, 2012 | Apr 29, 2026 |
| | CVE-2012-5051 |  VMware | medium | 5.0 | 0.1%
| | Directory traversal vulnerability in VMware CapacityIQ 1.5.x allows remote attackers to read arbitra… | Oct 5, 2012 | Apr 29, 2026 |
| | CVE-2012-5050 | VMware | medium | 4.3 | 0.3%
| | Cross-site scripting (XSS) vulnerability in the server in VMware vCenter Operations (aka vCOps) befo… | Oct 5, 2012 | Apr 29, 2026 |
| | CVE-2012-4897 | VMware | medium | 6.9 | 0.2%
| | Untrusted search path vulnerability in the installer in VMware Movie Decoder before 9.0 allows local… | Oct 5, 2012 | Apr 29, 2026 |
| | CVE-2012-3267 | HPE | medium | 5.0 | 1.5%
| | Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.20 allows remote attackers to obtain… | Oct 4, 2012 | Apr 29, 2026 |
| | CVE-2012-3266 | HPE | medium | 5.0 | 0.7%
| | Unspecified vulnerability in IBRIX 6.1.196 through 6.1.251 on HP IBRIX X9000 Storage allows remote a… | Oct 2, 2012 | Apr 29, 2026 |
| | CVE-2012-2145 | Apache | medium | 5.0 | 7.1%
| | Apache Qpid 0.17 and earlier does not properly restrict incoming client connections, which allows re… | Sep 28, 2012 | Apr 29, 2026 |
| | CVE-2012-3949 | Cisco | high | 7.8 | 0.9%
| | The SIP implementation in Cisco Unified Communications Manager (CUCM) 6.x and 7.x before 7.1(5b)su5,… | Sep 27, 2012 | Apr 29, 2026 |
| | CVE-2012-4015 | Microsoft | medium | 4.3 | 0.2%
| | Cross-site scripting (XSS) vulnerability in the management screen in myLittleTools myLittleAdmin for… | Sep 25, 2012 | Apr 29, 2026 |
| | CVE-2012-4014 |  Trellix | high | 7.8 | 0.5%
| | Unspecified vulnerability in McAfee Email Anti-virus (formerly WebShield SMTP) allows remote attacke… | Sep 25, 2012 | Apr 29, 2026 |
| | CVE-2012-3264 | HPE | high | 7.5 | 6.6%
| | Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attack… | Sep 25, 2012 | Apr 29, 2026 |
| | CVE-2012-3263 | HPE | critical | 10.0 | 24.2%
| | Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attack… | Sep 25, 2012 | Apr 29, 2026 |
| | CVE-2012-3262 | HPE | critical | 10.0 | 24.2%
| | Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attack… | Sep 25, 2012 | Apr 29, 2026 |
| | CVE-2012-3261 | HPE | critical | 10.0 | 68.6%
| | Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attack… | Sep 25, 2012 | Apr 29, 2026 |
| | CVE-2012-3260 | HPE | critical | 10.0 | 68.6%
| | Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attack… | Sep 25, 2012 | Apr 29, 2026 |
| | CVE-2012-3259 | HPE | critical | 10.0 | 29.2%
| | Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attack… | Sep 25, 2012 | Apr 29, 2026 |
| | CVE-2012-4655 | Cisco | critical | 9.3 | 2.4%
| | The WebLaunch feature in Cisco Secure Desktop before 3.6.6020 does not properly validate binaries th… | Sep 24, 2012 | Apr 29, 2026 |