# Vulnerabilities published in 2012


- [CVE-2012-3495](https://insights.sbomify.com/CVE-2012-3495/): Denial of service in n/a (medium 6.1)
- [CVE-2012-3494](https://insights.sbomify.com/CVE-2012-3494/): Denial of service in n/a (low 2.1)
- [CVE-2012-3493](https://insights.sbomify.com/CVE-2012-3493/): Information disclosure in n/a (medium 5.8)
- [CVE-2012-3492](https://insights.sbomify.com/CVE-2012-3492/): Auth bypass in n/a (medium 6.4)
- [CVE-2012-3491](https://insights.sbomify.com/CVE-2012-3491/): Missing authorization in n/a (medium 4.0)
- [CVE-2012-3490](https://insights.sbomify.com/CVE-2012-3490/): Privilege escalation in Condor (high 8.8)
- [CVE-2012-3489](https://insights.sbomify.com/CVE-2012-3489/): XML external entity in n/a (medium 6.5)
- [CVE-2012-3488](https://insights.sbomify.com/CVE-2012-3488/): XML external entity in n/a (medium 4.9)
- [CVE-2012-3487](https://insights.sbomify.com/CVE-2012-3487/): Race condition in n/a (low 1.2)
- [CVE-2012-3486](https://insights.sbomify.com/CVE-2012-3486/): Privilege escalation in n/a (medium 6.9)
- [CVE-2012-3485](https://insights.sbomify.com/CVE-2012-3485/): Privilege escalation in n/a (high 7.2)
- [CVE-2012-3484](https://insights.sbomify.com/CVE-2012-3484/): Privilege escalation in n/a (high 7.2)
- [CVE-2012-3483](https://insights.sbomify.com/CVE-2012-3483/): Race condition in n/a (medium 6.2)
- [CVE-2012-3482](https://insights.sbomify.com/CVE-2012-3482/): Memory corruption in n/a (medium 5.8)
- [CVE-2012-3481](https://insights.sbomify.com/CVE-2012-3481/): Integer overflow in n/a (medium 6.8)
- [CVE-2012-3480](https://insights.sbomify.com/CVE-2012-3480/): Integer overflow in n/a (medium 4.6)
- [CVE-2012-3479](https://insights.sbomify.com/CVE-2012-3479/): Code injection in n/a (medium 6.8)
- [CVE-2012-3478](https://insights.sbomify.com/CVE-2012-3478/): Security feature bypass in n/a (low 2.1)
- [CVE-2012-3477](https://insights.sbomify.com/CVE-2012-3477/): SQL injection in n/a (high 7.5)
- [CVE-2012-3476](https://insights.sbomify.com/CVE-2012-3476/): Cross-site scripting in n/a (low 3.5)
- [CVE-2012-3475](https://insights.sbomify.com/CVE-2012-3475/): Privilege escalation in n/a (high 7.5)
- [CVE-2012-3474](https://insights.sbomify.com/CVE-2012-3474/): Information disclosure in n/a (medium 5.0)
- [CVE-2012-3473](https://insights.sbomify.com/CVE-2012-3473/): Missing authorization in n/a (medium 6.4)
- [CVE-2012-3472](https://insights.sbomify.com/CVE-2012-3472/): Missing authorization in n/a (medium 6.4)
- [CVE-2012-3471](https://insights.sbomify.com/CVE-2012-3471/): SQL injection in n/a (high 7.5)
- [CVE-2012-3470](https://insights.sbomify.com/CVE-2012-3470/): SQL injection in n/a (high 7.5)
- [CVE-2012-3469](https://insights.sbomify.com/CVE-2012-3469/): SQL injection in n/a (high 7.5)
- [CVE-2012-3468](https://insights.sbomify.com/CVE-2012-3468/): SQL injection in n/a (high 7.5)
- [CVE-2012-3467](https://insights.sbomify.com/CVE-2012-3467/): Apache QPID Allows Remote Authentication Bypass (medium 5.0)
- [CVE-2012-3466](https://insights.sbomify.com/CVE-2012-3466/): Security feature bypass in n/a (medium 4.4)
- [CVE-2012-3465](https://insights.sbomify.com/CVE-2012-3465/): actionpack Cross-site Scripting vulnerability (medium 4.3)
- [CVE-2012-3464](https://insights.sbomify.com/CVE-2012-3464/): activesupport Cross-site Scripting vulnerability (medium 4.3)
- [CVE-2012-3463](https://insights.sbomify.com/CVE-2012-3463/): actionpack Cross-site Scripting vulnerability (medium 4.3)
- [CVE-2012-3462](https://insights.sbomify.com/CVE-2012-3462/): Auth bypass in sssd (high 8.8)
- [CVE-2012-3461](https://insights.sbomify.com/CVE-2012-3461/): Memory corruption in n/a (medium 4.3)
- [CVE-2012-3460](https://insights.sbomify.com/CVE-2012-3460/): Hardcoded credentials in cumin (critical 9.8)
- [CVE-2012-3459](https://insights.sbomify.com/CVE-2012-3459/): Privilege escalation in n/a (medium 4.9)
- [CVE-2012-3458](https://insights.sbomify.com/CVE-2012-3458/): Beaker Sensitive Information Disclosure vulnerability (medium 4.3)
- [CVE-2012-3457](https://insights.sbomify.com/CVE-2012-3457/): Information disclosure in n/a (low 2.1)
- [CVE-2012-3456](https://insights.sbomify.com/CVE-2012-3456/): Memory corruption in n/a (high 7.5)
- [CVE-2012-3455](https://insights.sbomify.com/CVE-2012-3455/): Memory corruption in n/a (high 7.5)
- [CVE-2012-3454](https://insights.sbomify.com/CVE-2012-3454/): Misconfiguration in n/a (low 3.6)
- [CVE-2012-3453](https://insights.sbomify.com/CVE-2012-3453/): Misconfiguration in n/a (low 3.6)
- [CVE-2012-3452](https://insights.sbomify.com/CVE-2012-3452/): Security feature bypass in n/a (low 3.3)
- [CVE-2012-3451](https://insights.sbomify.com/CVE-2012-3451/): Remote web-service operation execution in Apache CXF (medium 4.3)
- [CVE-2012-3450](https://insights.sbomify.com/CVE-2012-3450/): Denial of service in n/a (low 2.6)
- [CVE-2012-3449](https://insights.sbomify.com/CVE-2012-3449/): Path traversal in n/a (low 3.6)
- [CVE-2012-3448](https://insights.sbomify.com/CVE-2012-3448/): Code injection in n/a (high 7.5)
- [CVE-2012-3447](https://insights.sbomify.com/CVE-2012-3447/): Arbitrary file overwrite in OpenStack Nova (medium 4.9)
- [CVE-2012-3446](https://insights.sbomify.com/CVE-2012-3446/): Apache Libcloud vulnerable to certificate impersonation (medium 5.9)
- [CVE-2012-3445](https://insights.sbomify.com/CVE-2012-3445/): Memory corruption in n/a (low 3.5)
- [CVE-2012-3444](https://insights.sbomify.com/CVE-2012-3444/): Django vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer (medium 5.0)
- [CVE-2012-3443](https://insights.sbomify.com/CVE-2012-3443/): Django Image Field Vulnerable to Image Decompression Bombs (medium 5.0)
- [CVE-2012-3442](https://insights.sbomify.com/CVE-2012-3442/): Django Allows Redirect via Data URL (medium 4.3)
- [CVE-2012-3441](https://insights.sbomify.com/CVE-2012-3441/): Missing authorization in n/a (high 7.5)
- [CVE-2012-3440](https://insights.sbomify.com/CVE-2012-3440/): Path traversal in n/a (medium 5.6)
- [CVE-2012-3438](https://insights.sbomify.com/CVE-2012-3438/): Integer overflow in n/a (medium 4.3)
- [CVE-2012-3437](https://insights.sbomify.com/CVE-2012-3437/): Integer overflow in n/a (medium 4.3)
- [CVE-2012-3436](https://insights.sbomify.com/CVE-2012-3436/): Null dereference in n/a (medium 5.0)
- [CVE-2012-3435](https://insights.sbomify.com/CVE-2012-3435/): SQL injection in n/a (high 7.5)
- [CVE-2012-3434](https://insights.sbomify.com/CVE-2012-3434/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-3433](https://insights.sbomify.com/CVE-2012-3433/): Denial of service in n/a (medium 4.9)
- [CVE-2012-3432](https://insights.sbomify.com/CVE-2012-3432/): Denial of service in n/a (low 1.9)
- [CVE-2012-3431](https://insights.sbomify.com/CVE-2012-3431/): Weak cryptography in n/a (medium 4.3)
- [CVE-2012-3430](https://insights.sbomify.com/CVE-2012-3430/): Information disclosure in n/a (low 2.1)
- [CVE-2012-3429](https://insights.sbomify.com/CVE-2012-3429/): Denial of service in n/a (medium 5.0)
- [CVE-2012-3428](https://insights.sbomify.com/CVE-2012-3428/): User confusion in IronJacamar (medium 4.3)
- [CVE-2012-3427](https://insights.sbomify.com/CVE-2012-3427/): Information disclosure in n/a (low 2.1)
- [CVE-2012-3426](https://insights.sbomify.com/CVE-2012-3426/): OpenStack Keystone token expiration issues (medium 4.9)
- [CVE-2012-3425](https://insights.sbomify.com/CVE-2012-3425/): Denial of service in n/a (medium 4.3)
- [CVE-2012-3424](https://insights.sbomify.com/CVE-2012-3424/): actionpack Improper Authentication vulnerability (medium 5.0)
- [CVE-2012-3423](https://insights.sbomify.com/CVE-2012-3423/): Memory corruption in n/a (high 7.5)
- [CVE-2012-3422](https://insights.sbomify.com/CVE-2012-3422/): Memory corruption in n/a (medium 6.8)
- [CVE-2012-3421](https://insights.sbomify.com/CVE-2012-3421/): Denial of service in n/a (medium 5.0)
- [CVE-2012-3420](https://insights.sbomify.com/CVE-2012-3420/): Denial of service in n/a (medium 5.0)
- [CVE-2012-3419](https://insights.sbomify.com/CVE-2012-3419/): Information disclosure in n/a (medium 5.0)
- [CVE-2012-3418](https://insights.sbomify.com/CVE-2012-3418/): Integer overflow in n/a (medium 5.0)
- [CVE-2012-3417](https://insights.sbomify.com/CVE-2012-3417/): Security feature bypass in n/a (medium 4.0)
- [CVE-2012-3416](https://insights.sbomify.com/CVE-2012-3416/): Auth bypass in n/a (critical 10.0)
- [CVE-2012-3414](https://insights.sbomify.com/CVE-2012-3414/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-3413](https://insights.sbomify.com/CVE-2012-3413/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-3412](https://insights.sbomify.com/CVE-2012-3412/): Denial of service in n/a (high 7.8)
- [CVE-2012-3411](https://insights.sbomify.com/CVE-2012-3411/): Denial of service in n/a (medium 5.0)
- [CVE-2012-3410](https://insights.sbomify.com/CVE-2012-3410/): Memory corruption in n/a (medium 4.6)
- [CVE-2012-3409](https://insights.sbomify.com/CVE-2012-3409/): Privilege escalation in ecryptfs-utils (high 7.8)
- [CVE-2012-3408](https://insights.sbomify.com/CVE-2012-3408/): Puppet supports use of IP addresses in certnames without warning of potential risks (low 2.6)
- [CVE-2012-3407](https://insights.sbomify.com/CVE-2012-3407/): Memory corruption in plow (high 7.8)
- [CVE-2012-3406](https://insights.sbomify.com/CVE-2012-3406/): Memory corruption in n/a (medium 6.8)
- [CVE-2012-3405](https://insights.sbomify.com/CVE-2012-3405/): Integer overflow in n/a (medium 5.0)
- [CVE-2012-3404](https://insights.sbomify.com/CVE-2012-3404/): Integer overflow in n/a (medium 5.0)
- [CVE-2012-3403](https://insights.sbomify.com/CVE-2012-3403/): Memory corruption in n/a (medium 6.8)
- [CVE-2012-3402](https://insights.sbomify.com/CVE-2012-3402/): Integer overflow in n/a (medium 6.8)
- [CVE-2012-3401](https://insights.sbomify.com/CVE-2012-3401/): Memory corruption in n/a (medium 6.8)
- [CVE-2012-3400](https://insights.sbomify.com/CVE-2012-3400/): Memory corruption in n/a (high 7.6)
- [CVE-2012-3399](https://insights.sbomify.com/CVE-2012-3399/): Command injection in n/a (high 7.5)
- [CVE-2012-3398](https://insights.sbomify.com/CVE-2012-3398/): Denial of service in n/a (medium 4.0)
- [CVE-2012-3397](https://insights.sbomify.com/CVE-2012-3397/): Missing authorization in n/a (medium 4.0)
- [CVE-2012-3396](https://insights.sbomify.com/CVE-2012-3396/): Cross-site scripting in n/a (low 3.5)
- [CVE-2012-3395](https://insights.sbomify.com/CVE-2012-3395/): SQL injection in n/a (medium 6.5)
- [CVE-2012-3394](https://insights.sbomify.com/CVE-2012-3394/): Information disclosure in n/a (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2012/page/25/