# Vulnerabilities published in 2012


- [CVE-2012-4481](https://insights.sbomify.com/CVE-2012-4481/): Security feature bypass in n/a (medium 4.3)
- [CVE-2012-4480](https://insights.sbomify.com/CVE-2012-4480/): Privilege escalation in mom (high 7.8)
- [CVE-2012-4479](https://insights.sbomify.com/CVE-2012-4479/): SQL injection in n/a (high 7.5)
- [CVE-2012-4478](https://insights.sbomify.com/CVE-2012-4478/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2012-4477](https://insights.sbomify.com/CVE-2012-4477/): Auth bypass in n/a (medium 5.0)
- [CVE-2012-4476](https://insights.sbomify.com/CVE-2012-4476/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4475](https://insights.sbomify.com/CVE-2012-4475/): Missing authorization in n/a (medium 5.0)
- [CVE-2012-4474](https://insights.sbomify.com/CVE-2012-4474/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4473](https://insights.sbomify.com/CVE-2012-4473/): Missing authorization in n/a (low 3.5)
- [CVE-2012-4472](https://insights.sbomify.com/CVE-2012-4472/): File upload in n/a (medium 5.1)
- [CVE-2012-4471](https://insights.sbomify.com/CVE-2012-4471/): Missing authorization in n/a (medium 5.0)
- [CVE-2012-4470](https://insights.sbomify.com/CVE-2012-4470/): Missing authorization in n/a (high 7.5)
- [CVE-2012-4469](https://insights.sbomify.com/CVE-2012-4469/): Cross-site scripting in n/a (low 2.6)
- [CVE-2012-4468](https://insights.sbomify.com/CVE-2012-4468/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4467](https://insights.sbomify.com/CVE-2012-4467/): Information disclosure in n/a (medium 6.6)
- [CVE-2012-4466](https://insights.sbomify.com/CVE-2012-4466/): Security feature bypass in n/a (medium 5.0)
- [CVE-2012-4465](https://insights.sbomify.com/CVE-2012-4465/): Memory corruption in n/a (medium 6.5)
- [CVE-2012-4464](https://insights.sbomify.com/CVE-2012-4464/): Security feature bypass in n/a (medium 5.0)
- [CVE-2012-4463](https://insights.sbomify.com/CVE-2012-4463/): Command injection in n/a (medium 5.1)
- [CVE-2012-4462](https://insights.sbomify.com/CVE-2012-4462/): Denial of service in n/a (medium 4.3)
- [CVE-2012-4461](https://insights.sbomify.com/CVE-2012-4461/): Denial of service in n/a (low 1.9)
- [CVE-2012-4460](https://insights.sbomify.com/CVE-2012-4460/): Denial of service in n/a (medium 5.0)
- [CVE-2012-4459](https://insights.sbomify.com/CVE-2012-4459/): Integer overflow in n/a (medium 5.0)
- [CVE-2012-4458](https://insights.sbomify.com/CVE-2012-4458/): Denial of service in n/a (medium 5.0)
- [CVE-2012-4457](https://insights.sbomify.com/CVE-2012-4457/): OpenStack Keystone Token authorization for a user in a disabled tenant is allowed (medium 4.0)
- [CVE-2012-4456](https://insights.sbomify.com/CVE-2012-4456/): OpenStack Keystone Improper Authentication vulnerability (high 7.5)
- [CVE-2012-4455](https://insights.sbomify.com/CVE-2012-4455/): Path traversal in n/a (medium 6.2)
- [CVE-2012-4454](https://insights.sbomify.com/CVE-2012-4454/): Path traversal in n/a (low 2.9)
- [CVE-2012-4453](https://insights.sbomify.com/CVE-2012-4453/): Information disclosure in n/a (low 2.1)
- [CVE-2012-4452](https://insights.sbomify.com/CVE-2012-4452/): Privilege escalation in n/a (low 2.1)
- [CVE-2012-4451](https://insights.sbomify.com/CVE-2012-4451/): Cross-site scripting in Zend Framework (medium 6.1)
- [CVE-2012-4450](https://insights.sbomify.com/CVE-2012-4450/): Auth bypass in n/a (medium 6.0)
- [CVE-2012-4449](https://insights.sbomify.com/CVE-2012-4449/): Use of a Broken or Risky Cryptographic Algorithm in Apache Hadoop (critical 9.8)
- [CVE-2012-4448](https://insights.sbomify.com/CVE-2012-4448/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2012-4447](https://insights.sbomify.com/CVE-2012-4447/): Memory corruption in n/a (medium 6.8)
- [CVE-2012-4446](https://insights.sbomify.com/CVE-2012-4446/): Improper Authentication in Apache Qpid (medium 6.8)
- [CVE-2012-4445](https://insights.sbomify.com/CVE-2012-4445/): Memory corruption in n/a (medium 4.3)
- [CVE-2012-4444](https://insights.sbomify.com/CVE-2012-4444/): Security feature bypass in n/a (medium 5.0)
- [CVE-2012-4443](https://insights.sbomify.com/CVE-2012-4443/): Privilege escalation in n/a (medium 6.9)
- [CVE-2012-4442](https://insights.sbomify.com/CVE-2012-4442/): Race condition in n/a (medium 4.7)
- [CVE-2012-4441](https://insights.sbomify.com/CVE-2012-4441/): Jenkins CI Game Plugin allows Cross-Site Scripting (XSS) (medium 6.1)
- [CVE-2012-4440](https://insights.sbomify.com/CVE-2012-4440/): Jenkins Violation Plugin allows Cross-Site Scripting (XSS) (medium 6.1)
- [CVE-2012-4439](https://insights.sbomify.com/CVE-2012-4439/): Jenkins allows Cross-Site Scripting (XSS) via Crafted URL (medium 6.1)
- [CVE-2012-4438](https://insights.sbomify.com/CVE-2012-4438/): Jenkins allows Data Insertion and Execution of Code by those with Read and HTTP Access (high 8.8)
- [CVE-2012-4437](https://insights.sbomify.com/CVE-2012-4437/): Cross-site Scripting in SmartyException (medium 4.3)
- [CVE-2012-4436](https://insights.sbomify.com/CVE-2012-4436/): Memory corruption in n/a (medium 4.4)
- [CVE-2012-4435](https://insights.sbomify.com/CVE-2012-4435/): Denial of service in n/a (medium 4.0)
- [CVE-2012-4434](https://insights.sbomify.com/CVE-2012-4434/): fwknop before 2.0.3 allow remote authenticated users to cause a denial of service (server crash) or possibly execute arbitrary code. (high 8.8)
- [CVE-2012-4433](https://insights.sbomify.com/CVE-2012-4433/): Integer overflow in n/a (high 7.5)
- [CVE-2012-4432](https://insights.sbomify.com/CVE-2012-4432/): Use after free in n/a (high 7.5)
- [CVE-2012-4431](https://insights.sbomify.com/CVE-2012-4431/): Cross-Site Request Forgery in Apache Tomcat (medium 4.3)
- [CVE-2012-4430](https://insights.sbomify.com/CVE-2012-4430/): Missing authorization in n/a (medium 4.0)
- [CVE-2012-4429](https://insights.sbomify.com/CVE-2012-4429/): Information disclosure in n/a (medium 5.0)
- [CVE-2012-4428](https://insights.sbomify.com/CVE-2012-4428/): Denial of service in openslp-dfsg (high 7.5)
- [CVE-2012-4427](https://insights.sbomify.com/CVE-2012-4427/): Code injection in n/a (medium 6.8)
- [CVE-2012-4426](https://insights.sbomify.com/CVE-2012-4426/): Other in n/a (medium 6.8)
- [CVE-2012-4425](https://insights.sbomify.com/CVE-2012-4425/): Privilege escalation in n/a (medium 6.9)
- [CVE-2012-4424](https://insights.sbomify.com/CVE-2012-4424/): Memory corruption in n/a (medium 5.1)
- [CVE-2012-4423](https://insights.sbomify.com/CVE-2012-4423/): Null dereference in n/a (medium 5.0)
- [CVE-2012-4422](https://insights.sbomify.com/CVE-2012-4422/): Missing authorization in n/a (low 3.5)
- [CVE-2012-4421](https://insights.sbomify.com/CVE-2012-4421/): Missing authorization in n/a (medium 4.0)
- [CVE-2012-4420](https://insights.sbomify.com/CVE-2012-4420/): Information disclosure in java-1.7.0-openjdk (high 7.5)
- [CVE-2012-4419](https://insights.sbomify.com/CVE-2012-4419/): Denial of service in n/a (medium 5.0)
- [CVE-2012-4418](https://insights.sbomify.com/CVE-2012-4418/): Apache Axis2 Vulnerable to XML Signature wrapping attack (medium 5.8)
- [CVE-2012-4417](https://insights.sbomify.com/CVE-2012-4417/): Path traversal in n/a (low 3.6)
- [CVE-2012-4416](https://insights.sbomify.com/CVE-2012-4416/): Other in n/a (medium 6.4)
- [CVE-2012-4415](https://insights.sbomify.com/CVE-2012-4415/): Memory corruption in n/a (high 7.5)
- [CVE-2012-4414](https://insights.sbomify.com/CVE-2012-4414/): SQL injection in n/a (medium 6.5)
- [CVE-2012-4413](https://insights.sbomify.com/CVE-2012-4413/): OpenStack Keystone does not invalidate existing tokens when granting or revoking roles (medium 4.0)
- [CVE-2012-4412](https://insights.sbomify.com/CVE-2012-4412/): Integer overflow in n/a (high 7.5)
- [CVE-2012-4411](https://insights.sbomify.com/CVE-2012-4411/): Information disclosure in n/a (medium 4.6)
- [CVE-2012-4409](https://insights.sbomify.com/CVE-2012-4409/): Memory corruption in n/a (medium 6.8)
- [CVE-2012-4408](https://insights.sbomify.com/CVE-2012-4408/): Missing authorization in n/a (medium 5.5)
- [CVE-2012-4407](https://insights.sbomify.com/CVE-2012-4407/): Information disclosure in n/a (medium 5.0)
- [CVE-2012-4406](https://insights.sbomify.com/CVE-2012-4406/): OpenStack Object Storage (swift) Code Injection vulnerability (critical 9.8)
- [CVE-2012-4405](https://insights.sbomify.com/CVE-2012-4405/): Integer overflow in n/a (medium 6.8)
- [CVE-2012-4404](https://insights.sbomify.com/CVE-2012-4404/): MoinMoin Improper Access Control (medium 6.0)
- [CVE-2012-4403](https://insights.sbomify.com/CVE-2012-4403/): Information disclosure in n/a (medium 5.0)
- [CVE-2012-4402](https://insights.sbomify.com/CVE-2012-4402/): Missing authorization in n/a (medium 4.9)
- [CVE-2012-4401](https://insights.sbomify.com/CVE-2012-4401/): Missing authorization in n/a (medium 4.0)
- [CVE-2012-4400](https://insights.sbomify.com/CVE-2012-4400/): Security feature bypass in n/a (medium 4.0)
- [CVE-2012-4399](https://insights.sbomify.com/CVE-2012-4399/): CakePHPallows remote attackers to read arbitrary files via XML data containing external entity references (high 7.5)
- [CVE-2012-4398](https://insights.sbomify.com/CVE-2012-4398/): Denial of service in n/a (medium 4.9)
- [CVE-2012-4397](https://insights.sbomify.com/CVE-2012-4397/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4396](https://insights.sbomify.com/CVE-2012-4396/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4395](https://insights.sbomify.com/CVE-2012-4395/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4394](https://insights.sbomify.com/CVE-2012-4394/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4393](https://insights.sbomify.com/CVE-2012-4393/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2012-4392](https://insights.sbomify.com/CVE-2012-4392/): Auth bypass in n/a (high 7.5)
- [CVE-2012-4391](https://insights.sbomify.com/CVE-2012-4391/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2012-4390](https://insights.sbomify.com/CVE-2012-4390/): Information disclosure in n/a (medium 4.0)
- [CVE-2012-4389](https://insights.sbomify.com/CVE-2012-4389/): File upload in n/a (medium 6.8)
- [CVE-2012-4388](https://insights.sbomify.com/CVE-2012-4388/): Other in n/a (medium 4.3)
- [CVE-2012-4387](https://insights.sbomify.com/CVE-2012-4387/): Denial of service in Apache Struts (medium 5.0)
- [CVE-2012-4386](https://insights.sbomify.com/CVE-2012-4386/): Cross-Site Request Forgery in Apache Struts (medium 6.8)
- [CVE-2012-4385](https://insights.sbomify.com/CVE-2012-4385/): Cross-site request forgery in letodms (medium 6.5)
- [CVE-2012-4384](https://insights.sbomify.com/CVE-2012-4384/): Cross-site scripting in letodms (medium 6.1)
- [CVE-2012-4383](https://insights.sbomify.com/CVE-2012-4383/): Contao core SQL Injection Vulnerability (high 8.8)
- [CVE-2012-4382](https://insights.sbomify.com/CVE-2012-4382/): Information disclosure in n/a (medium 4.9)
- [CVE-2012-4381](https://insights.sbomify.com/CVE-2012-4381/): Hardcoded credentials in MediaWiki (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2012/page/17/