# Vulnerabilities published in 2012


- [CVE-2012-4003](https://insights.sbomify.com/CVE-2012-4003/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-4002](https://insights.sbomify.com/CVE-2012-4002/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2012-4001](https://insights.sbomify.com/CVE-2012-4001/): Server-side request forgery in n/a (medium 5.0)
- [CVE-2012-4000](https://insights.sbomify.com/CVE-2012-4000/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-3999](https://insights.sbomify.com/CVE-2012-3999/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-3998](https://insights.sbomify.com/CVE-2012-3998/): SQL injection in n/a (high 7.5)
- [CVE-2012-3997](https://insights.sbomify.com/CVE-2012-3997/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-3996](https://insights.sbomify.com/CVE-2012-3996/): Information disclosure in n/a (medium 5.0)
- [CVE-2012-3995](https://insights.sbomify.com/CVE-2012-3995/): Memory corruption in n/a (critical 9.3)
- [CVE-2012-3994](https://insights.sbomify.com/CVE-2012-3994/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-3993](https://insights.sbomify.com/CVE-2012-3993/): Privilege escalation in n/a (critical 9.3)
- [CVE-2012-3992](https://insights.sbomify.com/CVE-2012-3992/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-3991](https://insights.sbomify.com/CVE-2012-3991/): Security feature bypass in n/a (critical 9.3)
- [CVE-2012-3990](https://insights.sbomify.com/CVE-2012-3990/): Use after free in n/a (critical 9.3)
- [CVE-2012-3989](https://insights.sbomify.com/CVE-2012-3989/): Memory corruption in n/a (critical 9.3)
- [CVE-2012-3988](https://insights.sbomify.com/CVE-2012-3988/): Use after free in n/a (critical 9.3)
- [CVE-2012-3987](https://insights.sbomify.com/CVE-2012-3987/): Privilege escalation in n/a (medium 4.0)
- [CVE-2012-3986](https://insights.sbomify.com/CVE-2012-3986/): Security feature bypass in n/a (medium 4.3)
- [CVE-2012-3985](https://insights.sbomify.com/CVE-2012-3985/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-3984](https://insights.sbomify.com/CVE-2012-3984/): Cross-site scripting in n/a (medium 6.8)
- [CVE-2012-3983](https://insights.sbomify.com/CVE-2012-3983/): Memory corruption in n/a (critical 10.0)
- [CVE-2012-3982](https://insights.sbomify.com/CVE-2012-3982/): Memory corruption in n/a (critical 9.3)
- [CVE-2012-3981](https://insights.sbomify.com/CVE-2012-3981/): Other in n/a (medium 5.0)
- [CVE-2012-3980](https://insights.sbomify.com/CVE-2012-3980/): Code injection in n/a (critical 9.3)
- [CVE-2012-3979](https://insights.sbomify.com/CVE-2012-3979/): Code injection in n/a (medium 6.8)
- [CVE-2012-3978](https://insights.sbomify.com/CVE-2012-3978/): Security feature bypass in n/a (medium 6.8)
- [CVE-2012-3976](https://insights.sbomify.com/CVE-2012-3976/): Information disclosure in n/a (medium 4.3)
- [CVE-2012-3975](https://insights.sbomify.com/CVE-2012-3975/): Information disclosure in n/a (medium 4.3)
- [CVE-2012-3974](https://insights.sbomify.com/CVE-2012-3974/): Path traversal in n/a (medium 6.9)
- [CVE-2012-3973](https://insights.sbomify.com/CVE-2012-3973/): Missing authorization in n/a (high 7.6)
- [CVE-2012-3972](https://insights.sbomify.com/CVE-2012-3972/): Information disclosure in n/a (medium 5.0)
- [CVE-2012-3971](https://insights.sbomify.com/CVE-2012-3971/): Memory corruption in n/a (critical 10.0)
- [CVE-2012-3970](https://insights.sbomify.com/CVE-2012-3970/): Use after free in n/a (critical 10.0)
- [CVE-2012-3969](https://insights.sbomify.com/CVE-2012-3969/): Integer overflow in n/a (critical 9.3)
- [CVE-2012-3968](https://insights.sbomify.com/CVE-2012-3968/): Use after free in n/a (critical 10.0)
- [CVE-2012-3967](https://insights.sbomify.com/CVE-2012-3967/): Memory corruption in n/a (critical 9.3)
- [CVE-2012-3966](https://insights.sbomify.com/CVE-2012-3966/): Memory corruption in n/a (critical 10.0)
- [CVE-2012-3965](https://insights.sbomify.com/CVE-2012-3965/): Privilege escalation in n/a (critical 9.3)
- [CVE-2012-3964](https://insights.sbomify.com/CVE-2012-3964/): Use after free in n/a (critical 10.0)
- [CVE-2012-3963](https://insights.sbomify.com/CVE-2012-3963/): Use after free in n/a (critical 10.0)
- [CVE-2012-3962](https://insights.sbomify.com/CVE-2012-3962/): Memory corruption in n/a (critical 9.3)
- [CVE-2012-3961](https://insights.sbomify.com/CVE-2012-3961/): Use after free in n/a (critical 10.0)
- [CVE-2012-3960](https://insights.sbomify.com/CVE-2012-3960/): Use after free in n/a (critical 10.0)
- [CVE-2012-3959](https://insights.sbomify.com/CVE-2012-3959/): Use after free in n/a (critical 10.0)
- [CVE-2012-3958](https://insights.sbomify.com/CVE-2012-3958/): Use after free in n/a (critical 10.0)
- [CVE-2012-3957](https://insights.sbomify.com/CVE-2012-3957/): Memory corruption in n/a (critical 10.0)
- [CVE-2012-3956](https://insights.sbomify.com/CVE-2012-3956/): Use after free in n/a (critical 10.0)
- [CVE-2012-3955](https://insights.sbomify.com/CVE-2012-3955/): Denial of service in n/a (high 7.1)
- [CVE-2012-3954](https://insights.sbomify.com/CVE-2012-3954/): Denial of service in n/a (low 3.3)
- [CVE-2012-3953](https://insights.sbomify.com/CVE-2012-3953/): SQL injection in n/a (high 7.5)
- [CVE-2012-3952](https://insights.sbomify.com/CVE-2012-3952/): Cross-site scripting in n/a (low 2.6)
- [CVE-2012-3951](https://insights.sbomify.com/CVE-2012-3951/): Hardcoded credentials in n/a (high 7.5)
- [CVE-2012-3950](https://insights.sbomify.com/CVE-2012-3950/): Denial of service in n/a (high 7.1)
- [CVE-2012-3949](https://insights.sbomify.com/CVE-2012-3949/): Denial of service in n/a (high 7.8)
- [CVE-2012-3946](https://insights.sbomify.com/CVE-2012-3946/): Security feature bypass in n/a (medium 5.0)
- [CVE-2012-3941](https://insights.sbomify.com/CVE-2012-3941/): Memory corruption in n/a (critical 9.3)
- [CVE-2012-3940](https://insights.sbomify.com/CVE-2012-3940/): Memory corruption in n/a (critical 9.3)
- [CVE-2012-3939](https://insights.sbomify.com/CVE-2012-3939/): Memory corruption in n/a (critical 9.3)
- [CVE-2012-3938](https://insights.sbomify.com/CVE-2012-3938/): Memory corruption in n/a (critical 9.3)
- [CVE-2012-3937](https://insights.sbomify.com/CVE-2012-3937/): Memory corruption in n/a (critical 9.3)
- [CVE-2012-3936](https://insights.sbomify.com/CVE-2012-3936/): Memory corruption in n/a (critical 9.3)
- [CVE-2012-3935](https://insights.sbomify.com/CVE-2012-3935/): Denial of service in n/a (high 7.8)
- [CVE-2012-3924](https://insights.sbomify.com/CVE-2012-3924/): Denial of service in n/a (low 3.5)
- [CVE-2012-3923](https://insights.sbomify.com/CVE-2012-3923/): Denial of service in n/a (low 3.5)
- [CVE-2012-3919](https://insights.sbomify.com/CVE-2012-3919/): Denial of service in n/a (medium 5.0)
- [CVE-2012-3918](https://insights.sbomify.com/CVE-2012-3918/): Denial of service in n/a (medium 4.3)
- [CVE-2012-3915](https://insights.sbomify.com/CVE-2012-3915/): Denial of service in n/a (medium 5.0)
- [CVE-2012-3913](https://insights.sbomify.com/CVE-2012-3913/): Denial of service in n/a (medium 5.0)
- [CVE-2012-3908](https://insights.sbomify.com/CVE-2012-3908/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2012-3901](https://insights.sbomify.com/CVE-2012-3901/): Denial of service in n/a (medium 5.0)
- [CVE-2012-3899](https://insights.sbomify.com/CVE-2012-3899/): Memory corruption in n/a (medium 5.0)
- [CVE-2012-3895](https://insights.sbomify.com/CVE-2012-3895/): Denial of service in n/a (medium 6.3)
- [CVE-2012-3893](https://insights.sbomify.com/CVE-2012-3893/): Denial of service in n/a (medium 6.3)
- [CVE-2012-3890](https://insights.sbomify.com/CVE-2012-3890/): Memory corruption in n/a (medium 6.8)
- [CVE-2012-3889](https://insights.sbomify.com/CVE-2012-3889/): Memory corruption in n/a (medium 6.8)
- [CVE-2012-3888](https://insights.sbomify.com/CVE-2012-3888/): Auth bypass in n/a (medium 5.0)
- [CVE-2012-3887](https://insights.sbomify.com/CVE-2012-3887/): Weak cryptography in n/a (medium 5.0)
- [CVE-2012-3886](https://insights.sbomify.com/CVE-2012-3886/): Weak cryptography in n/a (medium 5.0)
- [CVE-2012-3885](https://insights.sbomify.com/CVE-2012-3885/): Hardcoded credentials in n/a (high 7.5)
- [CVE-2012-3884](https://insights.sbomify.com/CVE-2012-3884/): Weak cryptography in n/a (medium 5.0)
- [CVE-2012-3881](https://insights.sbomify.com/CVE-2012-3881/): SQL injection in n/a (high 7.5)
- [CVE-2012-3873](https://insights.sbomify.com/CVE-2012-3873/): SQL injection in n/a (medium 6.5)
- [CVE-2012-3872](https://insights.sbomify.com/CVE-2012-3872/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-3871](https://insights.sbomify.com/CVE-2012-3871/): Cross-site scripting in n/a (low 3.5)
- [CVE-2012-3870](https://insights.sbomify.com/CVE-2012-3870/): Cross-site scripting in n/a (low 3.5)
- [CVE-2012-3869](https://insights.sbomify.com/CVE-2012-3869/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-3868](https://insights.sbomify.com/CVE-2012-3868/): Race condition in n/a (medium 4.3)
- [CVE-2012-3867](https://insights.sbomify.com/CVE-2012-3867/): Pupper does not properly restrict characters in Common Name field of Certificate Signing Request (medium 4.3)
- [CVE-2012-3866](https://insights.sbomify.com/CVE-2012-3866/): Puppet allows local users to obtain sensitive configuration information (low 2.1)
- [CVE-2012-3865](https://insights.sbomify.com/CVE-2012-3865/): Puppet vulnerable to Path Traversal (low 3.5)
- [CVE-2012-3864](https://insights.sbomify.com/CVE-2012-3864/): Information disclosure in n/a (medium 4.0)
- [CVE-2012-3863](https://insights.sbomify.com/CVE-2012-3863/): Denial of service in n/a (medium 4.0)
- [CVE-2012-3859](https://insights.sbomify.com/CVE-2012-3859/): Other in n/a (critical 10.0)
- [CVE-2012-3848](https://insights.sbomify.com/CVE-2012-3848/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-3847](https://insights.sbomify.com/CVE-2012-3847/): Denial of service in n/a (medium 5.0)
- [CVE-2012-3846](https://insights.sbomify.com/CVE-2012-3846/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-3845](https://insights.sbomify.com/CVE-2012-3845/): Memory corruption in n/a (medium 5.0)
- [CVE-2012-3844](https://insights.sbomify.com/CVE-2012-3844/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-3843](https://insights.sbomify.com/CVE-2012-3843/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-3842](https://insights.sbomify.com/CVE-2012-3842/): Cross-site scripting in n/a (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2012/page/21/