# Vulnerabilities published in 2012


- [CVE-2012-4997](https://insights.sbomify.com/CVE-2012-4997/): Path traversal in n/a (high 7.5)
- [CVE-2012-4996](https://insights.sbomify.com/CVE-2012-4996/): SQL injection in n/a (high 7.5)
- [CVE-2012-4995](https://insights.sbomify.com/CVE-2012-4995/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4994](https://insights.sbomify.com/CVE-2012-4994/): SQL injection in n/a (medium 6.5)
- [CVE-2012-4993](https://insights.sbomify.com/CVE-2012-4993/): Missing authorization in n/a (high 7.5)
- [CVE-2012-4992](https://insights.sbomify.com/CVE-2012-4992/): Memory corruption in n/a (critical 9.0)
- [CVE-2012-4991](https://insights.sbomify.com/CVE-2012-4991/): Path traversal in n/a (high 8.5)
- [CVE-2012-4990](https://insights.sbomify.com/CVE-2012-4990/): SQL injection in n/a (high 7.5)
- [CVE-2012-4989](https://insights.sbomify.com/CVE-2012-4989/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4988](https://insights.sbomify.com/CVE-2012-4988/): Memory corruption in n/a (critical 9.3)
- [CVE-2012-4987](https://insights.sbomify.com/CVE-2012-4987/): Memory corruption in n/a (medium 6.8)
- [CVE-2012-4985](https://insights.sbomify.com/CVE-2012-4985/): Security feature bypass in n/a (medium 4.3)
- [CVE-2012-4983](https://insights.sbomify.com/CVE-2012-4983/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4982](https://insights.sbomify.com/CVE-2012-4982/): Open redirect in n/a (medium 5.8)
- [CVE-2012-4981](https://insights.sbomify.com/CVE-2012-4981/): Command injection in n/a (high 8.8)
- [CVE-2012-4980](https://insights.sbomify.com/CVE-2012-4980/): Memory corruption in n/a (high 7.8)
- [CVE-2012-4977](https://insights.sbomify.com/CVE-2012-4977/): Information disclosure in n/a (medium 5.0)
- [CVE-2012-4976](https://insights.sbomify.com/CVE-2012-4976/): Information disclosure in n/a (medium 5.0)
- [CVE-2012-4975](https://insights.sbomify.com/CVE-2012-4975/): Missing authorization in n/a (medium 4.0)
- [CVE-2012-4974](https://insights.sbomify.com/CVE-2012-4974/): Privilege escalation in n/a (medium 6.5)
- [CVE-2012-4972](https://insights.sbomify.com/CVE-2012-4972/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4971](https://insights.sbomify.com/CVE-2012-4971/): SQL injection in n/a (high 7.5)
- [CVE-2012-4970](https://insights.sbomify.com/CVE-2012-4970/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4969](https://insights.sbomify.com/CVE-2012-4969/): Microsoft Internet Explorer Use-After-Free (high 8.1, exploited in the wild)
- [CVE-2012-4968](https://insights.sbomify.com/CVE-2012-4968/): Silverstripe XSS Vulnerabilities (medium 4.3)
- [CVE-2012-4964](https://insights.sbomify.com/CVE-2012-4964/): Hardcoded credentials in n/a (high 7.5)
- [CVE-2012-4960](https://insights.sbomify.com/CVE-2012-4960/): Weak cryptography in n/a (medium 6.5)
- [CVE-2012-4959](https://insights.sbomify.com/CVE-2012-4959/): Path traversal in n/a (critical 10.0)
- [CVE-2012-4958](https://insights.sbomify.com/CVE-2012-4958/): Path traversal in n/a (high 7.8)
- [CVE-2012-4957](https://insights.sbomify.com/CVE-2012-4957/): Path traversal in n/a (high 7.8)
- [CVE-2012-4956](https://insights.sbomify.com/CVE-2012-4956/): Memory corruption in n/a (critical 10.0)
- [CVE-2012-4955](https://insights.sbomify.com/CVE-2012-4955/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4954](https://insights.sbomify.com/CVE-2012-4954/): Missing authorization in n/a (low 3.5)
- [CVE-2012-4953](https://insights.sbomify.com/CVE-2012-4953/): Memory corruption in n/a (critical 9.3)
- [CVE-2012-4952](https://insights.sbomify.com/CVE-2012-4952/): Hardcoded credentials in n/a (medium 5.0)
- [CVE-2012-4951](https://insights.sbomify.com/CVE-2012-4951/): SQL injection in n/a (high 7.5)
- [CVE-2012-4950](https://insights.sbomify.com/CVE-2012-4950/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4949](https://insights.sbomify.com/CVE-2012-4949/): SQL injection in n/a (medium 6.5)
- [CVE-2012-4948](https://insights.sbomify.com/CVE-2012-4948/): Weak cryptography in n/a (medium 5.3)
- [CVE-2012-4947](https://insights.sbomify.com/CVE-2012-4947/): Hardcoded credentials in n/a (medium 5.0)
- [CVE-2012-4946](https://insights.sbomify.com/CVE-2012-4946/): Weak cryptography in n/a (medium 5.0)
- [CVE-2012-4945](https://insights.sbomify.com/CVE-2012-4945/): Command injection in n/a (high 7.5)
- [CVE-2012-4944](https://insights.sbomify.com/CVE-2012-4944/): File upload in n/a (critical 10.0)
- [CVE-2012-4943](https://insights.sbomify.com/CVE-2012-4943/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2012-4942](https://insights.sbomify.com/CVE-2012-4942/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4941](https://insights.sbomify.com/CVE-2012-4941/): SQL injection in n/a (high 7.5)
- [CVE-2012-4940](https://insights.sbomify.com/CVE-2012-4940/): Path traversal in n/a (medium 6.4)
- [CVE-2012-4939](https://insights.sbomify.com/CVE-2012-4939/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4938](https://insights.sbomify.com/CVE-2012-4938/): Cross-site scripting in n/a (low 3.5)
- [CVE-2012-4937](https://insights.sbomify.com/CVE-2012-4937/): Auth bypass in n/a (medium 6.8)
- [CVE-2012-4936](https://insights.sbomify.com/CVE-2012-4936/): Cross-site scripting in n/a (medium 6.8)
- [CVE-2012-4935](https://insights.sbomify.com/CVE-2012-4935/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2012-4934](https://insights.sbomify.com/CVE-2012-4934/): Business logic in n/a (low 3.5)
- [CVE-2012-4933](https://insights.sbomify.com/CVE-2012-4933/): Hardcoded credentials in n/a (high 7.8)
- [CVE-2012-4932](https://insights.sbomify.com/CVE-2012-4932/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4930](https://insights.sbomify.com/CVE-2012-4930/): Information disclosure in n/a (low 2.6)
- [CVE-2012-4929](https://insights.sbomify.com/CVE-2012-4929/): Information disclosure in n/a (low 2.6)
- [CVE-2012-4928](https://insights.sbomify.com/CVE-2012-4928/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4927](https://insights.sbomify.com/CVE-2012-4927/): SQL injection in n/a (high 7.5)
- [CVE-2012-4926](https://insights.sbomify.com/CVE-2012-4926/): Missing authorization in n/a (medium 6.4)
- [CVE-2012-4925](https://insights.sbomify.com/CVE-2012-4925/): SQL injection in n/a (high 7.5)
- [CVE-2012-4924](https://insights.sbomify.com/CVE-2012-4924/): Memory corruption in n/a (critical 9.3)
- [CVE-2012-4923](https://insights.sbomify.com/CVE-2012-4923/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4922](https://insights.sbomify.com/CVE-2012-4922/): Denial of service in n/a (medium 5.0)
- [CVE-2012-4921](https://insights.sbomify.com/CVE-2012-4921/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2012-4920](https://insights.sbomify.com/CVE-2012-4920/): Path traversal in n/a (medium 5.0)
- [CVE-2012-4919](https://insights.sbomify.com/CVE-2012-4919/): File upload in Gallery (critical 9.8)
- [CVE-2012-4918](https://insights.sbomify.com/CVE-2012-4918/): Weak cryptography in n/a (medium 5.8)
- [CVE-2012-4917](https://insights.sbomify.com/CVE-2012-4917/): Weak cryptography in n/a (medium 5.0)
- [CVE-2012-4915](https://insights.sbomify.com/CVE-2012-4915/): Path traversal in n/a (medium 5.0)
- [CVE-2012-4914](https://insights.sbomify.com/CVE-2012-4914/): Memory corruption in n/a (critical 9.3)
- [CVE-2012-4912](https://insights.sbomify.com/CVE-2012-4912/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4909](https://insights.sbomify.com/CVE-2012-4909/): Information disclosure in n/a (medium 4.3)
- [CVE-2012-4908](https://insights.sbomify.com/CVE-2012-4908/): Path traversal in n/a (high 7.5)
- [CVE-2012-4907](https://insights.sbomify.com/CVE-2012-4907/): Security feature bypass in n/a (critical 9.3)
- [CVE-2012-4906](https://insights.sbomify.com/CVE-2012-4906/): Information disclosure in n/a (medium 5.0)
- [CVE-2012-4905](https://insights.sbomify.com/CVE-2012-4905/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4904](https://insights.sbomify.com/CVE-2012-4904/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4903](https://insights.sbomify.com/CVE-2012-4903/): Information disclosure in n/a (medium 5.0)
- [CVE-2012-4902](https://insights.sbomify.com/CVE-2012-4902/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2012-4901](https://insights.sbomify.com/CVE-2012-4901/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4900](https://insights.sbomify.com/CVE-2012-4900/): Null dereference in n/a (medium 5.5)
- [CVE-2012-4899](https://insights.sbomify.com/CVE-2012-4899/): Weak cryptography in n/a (low 2.1)
- [CVE-2012-4898](https://insights.sbomify.com/CVE-2012-4898/): Tropos Wireless Mesh Routers Insufficient Entropy (medium 6.1)
- [CVE-2012-4897](https://insights.sbomify.com/CVE-2012-4897/): Path traversal in n/a (medium 6.9)
- [CVE-2012-4896](https://insights.sbomify.com/CVE-2012-4896/): Memory corruption in n/a (critical 9.3)
- [CVE-2012-4895](https://insights.sbomify.com/CVE-2012-4895/): Memory corruption in n/a (critical 9.3)
- [CVE-2012-4894](https://insights.sbomify.com/CVE-2012-4894/): Memory corruption in n/a (critical 9.3)
- [CVE-2012-4893](https://insights.sbomify.com/CVE-2012-4893/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2012-4892](https://insights.sbomify.com/CVE-2012-4892/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4891](https://insights.sbomify.com/CVE-2012-4891/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4890](https://insights.sbomify.com/CVE-2012-4890/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4889](https://insights.sbomify.com/CVE-2012-4889/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4886](https://insights.sbomify.com/CVE-2012-4886/): Memory corruption in n/a (critical 10.0)
- [CVE-2012-4885](https://insights.sbomify.com/CVE-2012-4885/): Denial of service in n/a (medium 5.0)
- [CVE-2012-4884](https://insights.sbomify.com/CVE-2012-4884/): Code injection in n/a (medium 5.0)
- [CVE-2012-4883](https://insights.sbomify.com/CVE-2012-4883/): Path traversal in n/a (medium 6.9)
- [CVE-2012-4882](https://insights.sbomify.com/CVE-2012-4882/): Path traversal in n/a (medium 6.9)
- [CVE-2012-4881](https://insights.sbomify.com/CVE-2012-4881/): Path traversal in n/a (medium 6.9)
- [CVE-2012-4880](https://insights.sbomify.com/CVE-2012-4880/): Path traversal in n/a (medium 6.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2012/page/13/