Skip to content
BackEsc
Connect AISign inSign up free

November 2012 · Band 4

Possible (1 to 10%)

282 CVEs

Each square is a CVE that EPSS puts between 1% and 10%.

Connect AI

Every one of the 282 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Stack-based buffer overflow in the error function in ssg/ssgParser.cxx in PLIB 1.8.5 allows remote attackers to execute arbitrary code via a crafted 3d model file that triggers a…CVE-2012-4552Steve J Baker · 10.0% likely

    CWE-119

  2. rendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted web page, related to "…CVE-2012-4514Kde · 9.7% likely

    Kde

  3. Apache Tomcat through 7.0.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris.CVE-2012-5568Apache · 9.6% likely

    Apache

  4. The winbox service in MikroTik RouterOS 5.15 and earlier allows remote attackers to cause a denial of service (CPU consumption), read the router version, and possibly have other i…CVE-2012-6050Mikrotik · 9.4% likely

    CWE-16Mikrotik

  5. Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain na…CVE-2012-5783Apache · 9.3% likely

    CWE-295Apache

  6. Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.…CVE-2012-5285Adobe · 9.1% likely

    CWE-119Adobe

  7. The replay-countermeasure functionality in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 trac…CVE-2012-5885Apache · 9.0% likely

    CWE-264Apache

  8. The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 caches information about the authenticated user…CVE-2012-5886Apache · 8.8% likely

    CWE-287Apache

  9. java/org/apache/coyote/http11/InternalNioInputBuffer.java in the HTTP NIO connector in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.28 does not properly restrict the request…CVE-2012-2733Apache · 8.7% likely

    CWE-20Apache

  10. Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android…CVE-2012-5278Adobe · 8.6% likely

    CWE-264Adobe

  11. Integer overflow in the WebGL subsystem in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonke…CVE-2012-5835Mozilla · 8.5% likely

    CWE-190Mozilla

  12. Heap-based buffer overflow in the nsWindow::OnExposeEvent function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x b…CVE-2012-5829Mozilla · 8.4% likely

    CWE-787Mozilla

  13. The Samsung printer firmware before 20121031 has a hardcoded read-write SNMP community, which makes it easier for remote attackers to obtain administrative access via an SNMP requ…CVE-2012-4964Samsung · 8.0% likely

    CWE-264Samsung

  14. Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long f…CVE-2012-4527Mcrypt · 7.7% likely

    CWE-119Mcrypt

  15. Directory traversal vulnerability in json.php in TomatoCart 1.2.0 Alpha 2 and possibly earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the module par…CVE-2012-5907Tomatocart · 7.7% likely

    CWE-22Tomatocart

  16. Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.…CVE-2012-5287Adobe · 7.3% likely

    CWE-119Adobe

  17. Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.…CVE-2012-5286Adobe · 7.3% likely

    CWE-119Adobe

  18. Heap-based buffer overflow in the gfxShapedWord::CompressedGlyph::IsClusterStart function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0,…CVE-2012-5839Mozilla · 7.0% likely

    CWE-787Mozilla

  19. Adobe Flash Player before 10.3.183.43 and 11.x before 11.5.502.110 on Windows and Mac OS X, before 10.3.183.43 and 11.x before 11.2.202.251 on Linux, before 11.1.111.24 on Android…CVE-2012-5279Adobe · 6.6% likely

    CWE-119Adobe

  20. Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors.CVE-2012-4560Libssh · 6.5% likely

    CWE-119Libssh

  21. Use-after-free vulnerability in khtml/rendering/render_replaced.cpp in Konqueror in KDE 4.7.3, when the context menu is shown, allows remote attackers to cause a denial of service…CVE-2012-4515Kde · 6.4% likely

    CWE-399Kde

  22. Double free vulnerability in the Free_All_Memory function in jpeg/dectile.c in libfpx before 1.3.1-1, as used in the FlashPix PlugIn 4.2.2.0 for IrfanView, allows remote attackers…CVE-2012-0025Irfanview · 6.4% likely

    CWE-399Irfanview

  23. The copyTexImage2D implementation in the WebGL subsystem in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers to execute arbi…CVE-2012-5838Mozilla · 6.2% likely

    CWE-119Mozilla

  24. Use-after-free vulnerability in the nsViewManager::ProcessPendingUpdates function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote…CVE-2012-4217Mozilla · 6.2% likely

    CWE-416Mozilla

  25. Use-after-free vulnerability in the nsEditor::FindNextLeafNode function in Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey before 2.14 allows remote attackers…CVE-2012-4213Mozilla · 6.2% likely

    CWE-416Mozilla

  26. Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird…CVE-2012-5840Mozilla · 6.1% likely

    CWE-416Mozilla

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Sign inSign up free

Updated