| | CVE-2012-3451 |  Apache | medium | 4.3 | 10.0%
| | Apache CXF before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to execu… | Sep 24, 2012 | Apr 29, 2026 |
| | CVE-2012-2557 |  Microsoft | critical | 9.3 | 36.9%
| | Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to e… | Sep 21, 2012 | Apr 29, 2026 |
| | CVE-2012-2548 | Microsoft | critical | 9.3 | 36.9%
| | Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arb… | Sep 21, 2012 | Apr 29, 2026 |
| | CVE-2012-2546 | Microsoft | critical | 9.3 | 26.8%
| | Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arb… | Sep 21, 2012 | Apr 29, 2026 |
| | CVE-2012-1529 | Microsoft | critical | 9.3 | 26.8%
| | Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execu… | Sep 21, 2012 | Apr 29, 2026 |
| | CVE-2011-5184 |  HPE | medium | 4.3 | 2.6%
| | Multiple cross-site scripting (XSS) vulnerabilities in HP Network Node Manager i 9.10 allow remote a… | Sep 20, 2012 | Apr 29, 2026 |
| | CVE-2012-3373 | Apache | medium | 4.3 | 1.8%
| | Cross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.21 and 1.5.x before 1.5.8… | Sep 19, 2012 | Apr 29, 2026 |
| | CVE-2012-3258 | HPE | critical | 10.0 | 29.1%
| | Unspecified vulnerability in HP Operations Orchestration 9.0 before 9.03 allows remote attackers to … | Sep 19, 2012 | Apr 29, 2026 |
| | CVE-2012-4969 | Microsoft | high | 8.1 | 91.8%
| ⚠ KEV | Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Exp… | Sep 18, 2012 | Apr 21, 2026 |
| | CVE-2012-3919 |  Cisco | medium | 5.0 | 0.5%
| | The Cisco Application Control Engine (ACE) module 3.0 for Cisco Catalyst switches and Cisco routers … | Sep 16, 2012 | Apr 29, 2026 |
| | CVE-2012-3908 | Cisco | medium | 6.8 | 0.1%
| | Multiple cross-site request forgery (CSRF) vulnerabilities in the ISE Administrator user interface (… | Sep 16, 2012 | Apr 29, 2026 |
| | CVE-2012-3901 | Cisco | medium | 5.0 | 0.5%
| | The updateTime function in sensorApp on Cisco IPS 4200 series sensors 7.0 and 7.1 allows remote atta… | Sep 16, 2012 | Apr 29, 2026 |
| | CVE-2012-3899 | Cisco | medium | 5.0 | 0.5%
| | sensorApp on Cisco IPS 4200 series sensors 6.0, 6.2, and 7.0 does not properly allocate memory, whic… | Sep 16, 2012 | Apr 29, 2026 |
| | CVE-2012-3096 | Cisco | medium | 4.0 | 0.4%
| | Cisco Unity Connection (UC) 7.1, 8.0, and 8.5 allows remote authenticated users to cause a denial of… | Sep 16, 2012 | Apr 29, 2026 |
| | CVE-2012-3094 | Cisco | medium | 5.0 | 0.1%
| | The VPN downloader in the download_install component in Cisco AnyConnect Secure Mobility Client 3.1.… | Sep 16, 2012 | Apr 29, 2026 |
| | CVE-2012-3088 | Cisco | critical | 9.3 | 0.5%
| | Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495, and 3.2.x, does not check whether an… | Sep 16, 2012 | Apr 29, 2026 |
| | CVE-2012-3060 | Cisco | high | 7.8 | 0.4%
| | Cisco Unity Connection (UC) 8.6, 9.0, and 9.5 allows remote attackers to cause a denial of service (… | Sep 16, 2012 | Apr 29, 2026 |
| | CVE-2012-3052 | Cisco | medium | 6.9 | 0.1%
| | Untrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges vi… | Sep 16, 2012 | Apr 29, 2026 |
| | CVE-2012-4360 | Apache | medium | 4.3 | 0.4%
| | Cross-site scripting (XSS) vulnerability in the mod_pagespeed module 0.10.19.1 through 0.10.22.4 for… | Sep 15, 2012 | Apr 29, 2026 |
| | CVE-2012-4001 | Apache | medium | 5.0 | 0.2%
| | The mod_pagespeed module before 0.10.22.6 for the Apache HTTP Server does not properly verify its ho… | Sep 15, 2012 | Apr 29, 2026 |
| | CVE-2012-4629 | Cisco | high | 7.8 | 0.4%
| | The Cisco ASA-CX Context-Aware Security module before 9.0.2-103 for Adaptive Security Appliances (AS… | Sep 12, 2012 | Apr 29, 2026 |
| | CVE-2012-3935 | Cisco | high | 7.8 | 0.8%
| | Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (aka Jabber… | Sep 12, 2012 | Apr 29, 2026 |
| | CVE-2012-2536 | Microsoft | medium | 4.3 | 44.4%
| | Cross-site scripting (XSS) vulnerability in Microsoft Systems Management Server 2003 SP3 and System … | Sep 11, 2012 | Apr 29, 2026 |
| | CVE-2012-1892 | Microsoft | medium | 4.3 | 44.9%
| | Cross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 … | Sep 11, 2012 | Apr 29, 2026 |
| | CVE-2012-3257 | HPE | medium | 4.6 | 0.2%
| | HP Business Availability Center (BAC) 8.07 allows remote authenticated users to hijack web sessions … | Sep 8, 2012 | Apr 29, 2026 |
| | CVE-2012-3256 | HPE | medium | 6.8 | 0.1%
| | Cross-site request forgery (CSRF) vulnerability in HP Business Availability Center (BAC) 8.07 allows… | Sep 8, 2012 | Apr 29, 2026 |
| | CVE-2012-3255 | HPE | medium | 4.3 | 0.6%
| | Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 8.07 allows remote… | Sep 8, 2012 | Apr 29, 2026 |
| | CVE-2012-1666 |  VMware | medium | 6.9 | 0.2%
| | Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Playe… | Sep 8, 2012 | Apr 29, 2026 |
| | CVE-2012-4387 | Apache | medium | 5.0 | 7.9%
| | Apache Struts 2.0.0 through 2.3.4 allows remote attackers to cause a denial of service (CPU consumpt… | Sep 5, 2012 | Apr 29, 2026 |
| | CVE-2012-4386 | Apache | medium | 6.8 | 3.2%
| | The token check mechanism in Apache Struts 2.0.0 through 2.3.4 does not properly validate the token … | Sep 5, 2012 | Apr 29, 2026 |
| | CVE-2012-3526 | Apache | medium | 5.0 | 1.9%
| | The reverse proxy add forward module (mod_rpaf) 0.5 and 0.6 for the Apache HTTP Server allows remote… | Sep 5, 2012 | Apr 29, 2026 |
| | CVE-2012-3254 | HPE | critical | 10.0 | 31.0%
| | Multiple unspecified vulnerabilities in HP iNode Management Center before iNode PC 5.1 E0304 allow r… | Aug 30, 2012 | Apr 29, 2026 |
| | CVE-2012-3253 | HPE | critical | 10.0 | 31.0%
| | Multiple unspecified vulnerabilities in HP Intelligent Management Center (IMC) before 5.0 E0101P05 a… | Aug 30, 2012 | Apr 29, 2026 |
| | CVE-2012-3467 | Apache | medium | 5.0 | 1.1%
| | Apache QPID 0.14, 0.16, and earlier uses a NullAuthenticator mechanism to authenticate catch-up shad… | Aug 27, 2012 | Apr 29, 2026 |
| | CVE-2010-5184 |  Check Point | medium | 6.2 | 0.0%
| | Race condition in ZoneAlarm Extreme Security 9.1.507.000 on Windows XP allows local users to bypass … | Aug 25, 2012 | Apr 29, 2026 |
| | CVE-2010-5166 |  Trellix | medium | 6.2 | 0.1%
| | Race condition in McAfee Total Protection 2010 10.0.580 on Windows XP allows local users to bypass k… | Aug 25, 2012 | Apr 29, 2026 |
| | CVE-2012-3502 | Apache | medium | 4.3 | 3.8%
| | The proxy functionality in (1) mod_proxy_ajp.c in the mod_proxy_ajp module and (2) mod_proxy_http.c … | Aug 22, 2012 | Apr 29, 2026 |
| | CVE-2012-2687 | Apache | low | 2.6 | 8.3%
| | Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotia… | Aug 22, 2012 | Apr 29, 2026 |
| | CVE-2012-4599 | Trellix | critical | 10.0 | 5.5%
| | McAfee SmartFilter Administration, and SmartFilter Administration Bess Edition, before 4.2.1.01 does… | Aug 22, 2012 | Apr 29, 2026 |
| | CVE-2012-4598 | Trellix | critical | 9.3 | 67.9%
| | An unspecified ActiveX control in McAfee Virtual Technician (MVT) before 6.4, and ePO-MVT, allows re… | Aug 22, 2012 | Apr 29, 2026 |
| | CVE-2012-4597 | Trellix | medium | 4.3 | 0.3%
| | Cross-site scripting (XSS) vulnerability in McAfee Email and Web Security (EWS) 5.5 through Patch 6 … | Aug 22, 2012 | Apr 29, 2026 |
| | CVE-2012-4596 | Trellix | medium | 4.3 | 0.1%
| | Directory traversal vulnerability in McAfee Email Gateway (MEG) 7.0.0 and 7.0.1 allows remote authen… | Aug 22, 2012 | Apr 29, 2026 |
| | CVE-2012-4595 | Trellix | high | 7.5 | 0.4%
| | McAfee Email and Web Security (EWS) 5.5 through Patch 6 and 5.6 through Patch 3, and McAfee Email Ga… | Aug 22, 2012 | Apr 29, 2026 |
| | CVE-2012-4594 | Trellix | medium | 4.0 | 0.2%
| | McAfee ePolicy Orchestrator (ePO) 4.6.1 and earlier allows remote authenticated users to bypass inte… | Aug 22, 2012 | Apr 29, 2026 |
| | CVE-2012-4593 | Trellix | medium | 5.0 | 0.2%
| | McAfee Application Control and Change Control 5.1.x and 6.0.0 do not enforce an intended password re… | Aug 22, 2012 | Apr 29, 2026 |
| | CVE-2012-4592 | Trellix | medium | 5.0 | 0.3%
| | The Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 does not set the secure flag for … | Aug 22, 2012 | Apr 29, 2026 |
| | CVE-2012-4591 | Trellix | medium | 5.0 | 0.3%
| | About.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 discloses the name … | Aug 22, 2012 | Apr 29, 2026 |
| | CVE-2012-4590 | Trellix | medium | 4.3 | 0.3%
| | Multiple cross-site scripting (XSS) vulnerabilities in About.aspx in the Portal in McAfee Enterprise… | Aug 22, 2012 | Apr 29, 2026 |
| | CVE-2012-4589 | Trellix | low | 2.1 | 0.1%
| | Login.aspx in the Portal in McAfee Enterprise Mobility Manager (EMM) before 10.0 does not have an of… | Aug 22, 2012 | Apr 29, 2026 |
| | CVE-2012-4588 | Trellix | medium | 4.3 | 0.4%
| | McAfee Enterprise Mobility Manager (EMM) Agent before 4.8 and Server before 10.1 record all invalid … | Aug 22, 2012 | Apr 29, 2026 |