No weakness recorded · 2012

No weakness recorded: 2012

1,126 CVEs · 3 exploited

Every dot is a CVE whose record names no weakness (CWE), published in 2012. The named ones are the most at risk.

Connect AI

exploited in the wild: 3
check available: 2
likely to be exploited: 56

Every one of the 1,126 is a mark on the map. Named now: 1 to 26, most at risk first.

Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality…CVE-2012-3152Oracle · CVSS 9.1 · 99% likely
Oracle
The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Ser…CVE-2012-1856Microsoft · CVSS 8.8 · 72% likely
Microsoft Patchwork
Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, an…CVE-2012-1710Oracle · CVSS 9.8 · 7.8% likely
Oracle
Oracle Forms & Reports RCE (CVE-2012-3152 & CVE-2012-3153)CVE-2012-3153Oracle · 98% likely
Oracle
Apache Struts2 S2-008 RCECVE-2012-0392Apache · 98% likely
Apache
Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x…CVE-2012-0779Adobe · 87% likely
Adobe
protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows…CVE-2012-0053Apache · 82% likely
Apache
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, an…CVE-2012-5088Oracle · 79% likely
Oracle
Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2,…CVE-2012-0013Microsoft · 74% likely
Microsoft
Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008…CVE-2012-0003Microsoft · CVSS 8.1 · 70% likely
Microsoft
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect…CVE-2012-1533Oracle · 69% likely
Oracle
The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers…CVE-2012-5896Quest · 69% likely
Quest
Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10; FishEye and Crucible before 2.5.8, 2.6 before 2.6.8, and 2.7 before 2.7.12; Bamboo…CVE-2012-2926Atlassian · 66% likely
Atlassian
Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1326.CVE-2012-2020Hp · 65% likely
HP
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality via unknown ve…CVE-2012-5067Oracle · 64% likely
Oracle
Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1325.CVE-2012-2019Hp · 64% likely
HP
Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before 7.0.5.8 Q1 2012 Maintenance Release an…CVE-2012-3811Avaya · 63% likely
Avaya
file/show.cgi in Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary commands via an invalid character in a pathname, as demonstrated by a | (pipe) cha…CVE-2012-2982Gentoo · 62% likely
Gentoo
Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause…CVE-2012-0124Hp · 62% likely
HP
Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1461.CVE-2012-3259Hp · 60% likely
HP
Unspecified vulnerability in the Oracle AutoVue Office component in Oracle Supply Chain Products Suite 20.1.1 allows remote attackers to affect confidentiality, integrity, and ava…CVE-2012-0549Oracle · 59% likely
Oracle
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and JavaFX 2.0.2 and earlier allows re…CVE-2012-0500Oracle · 58% likely
Oracle
Unspecified vulnerability in the bazaar repository adapter in Redmine 0.9.x and 1.0.x before 1.0.5 allows remote attackers to execute arbitrary commands via unknown vectors.CVE-2011-4929Redmine · 46% likely
Redmine
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_3…CVE-2012-5081Oracle · 45% likely
Oracle
Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1463.CVE-2012-3261Hp · 40% likely
HP
Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1462.CVE-2012-3260Hp · 40% likely
HP

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.