CVEs
Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.
| CVE | Vendor · product | Exploitation | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2012-1823PHP CGI v5.3.12/5.4.2 Remote Code Execution | PHP · PHP | Exploited | 9.8 | 100% | 2012-05-11 |
| CVE-2012-0158The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 G… | Microsoft · MSCOMCTL.OCX | Exploited | 8.8 | 100% | 2012-04-10 |
| CVE-2012-3152Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality… | Oracle · Fusion Middleware | Exploited | 9.1 | 99% | 2012-10-16 |
| CVE-2012-4681Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted ap… | Oracle · Java SE | Exploited | 9.8 | 99% | 2012-08-28 |
| CVE-2012-0507Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows r… | Oracle · Java SE | Exploited | 9.8 | 98% | 2012-06-07 |
| CVE-2012-1723Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37… | Oracle · Java SE | Exploited | 9.8 | 94% | 2012-06-16 |
| CVE-2012-5076Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, an… | Oracle · Java SE | Exploited | 9.8 | 91% | 2012-10-16 |
| CVE-2012-0754Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Andr… | Adobe · Flash Player | Exploited | 7.8 | 91% | 2012-02-16 |
| CVE-2012-0151The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows… | Microsoft · Windows | Exploited | 7.8 | 88% | 2012-04-10 |
| CVE-2012-1889Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (m… | Microsoft · XML Core Services | Exploited | 8.8 | 84% | 2012-06-13 |
| CVE-2012-4969Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a craft… | Microsoft · Internet Explorer | Exploited | 8.1 | 80% | 2012-09-18 |
| CVE-2012-4792Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object… | Microsoft · Internet Explorer | Exploited | 8.8 | 79% | 2012-12-30 |
| CVE-2012-0391The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of pro… | Apache · Struts 2 | Exploited | 9.8 | 76% | 2012-01-08 |
| CVE-2012-1856The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Ser… | Microsoft · Office | Exploited | 8.8 | 72% | 2012-08-15 |
| CVE-2012-1535Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or c… | Adobe · Flash Player | Exploited | 7.8 | 70% | 2012-08-15 |
| CVE-2012-2539Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitra… | Microsoft · Word | Exploited | 7.8 | 53% | 2012-12-12 |
| CVE-2012-5054Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed argume… | Adobe · Flash Player | Exploited | 8.8 | 21% | 2012-09-24 |
| CVE-2012-1854Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Mi… | Microsoft · Visual Basic for Applications (VBA) | Exploited | 7.8 | 21% | 2012-07-10 |
| CVE-2012-1710Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, an… | Oracle · Fusion Middleware | Exploited | 9.8 | 7.8% | 2012-05-03 |
| CVE-2012-2034Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android… | Adobe · Flash Player | Exploited | 7.5 | 7.7% | 2012-06-09 |
| CVE-2012-0767Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Androi… | Adobe · Flash Player | Exploited | 6.1 | 6.2% | 2012-02-16 |
| CVE-2012-0518Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown… | Oracle · Fusion Middleware | Exploited | 4.7 | 4.7% | 2012-10-16 |
Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-15.