# Vulnerabilities published in 2012


- [CVE-2012-3393](https://insights.sbomify.com/CVE-2012-3393/): Cross-site scripting in n/a (low 3.5)
- [CVE-2012-3392](https://insights.sbomify.com/CVE-2012-3392/): Missing authorization in n/a (medium 5.5)
- [CVE-2012-3391](https://insights.sbomify.com/CVE-2012-3391/): Missing authorization in n/a (medium 4.0)
- [CVE-2012-3390](https://insights.sbomify.com/CVE-2012-3390/): Missing authorization in n/a (low 3.5)
- [CVE-2012-3389](https://insights.sbomify.com/CVE-2012-3389/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-3388](https://insights.sbomify.com/CVE-2012-3388/): Auth bypass in n/a (medium 4.0)
- [CVE-2012-3387](https://insights.sbomify.com/CVE-2012-3387/): Moodle Authentication Bypass in File Upload (medium 4.0)
- [CVE-2012-3386](https://insights.sbomify.com/CVE-2012-3386/): Race condition in n/a (medium 4.4)
- [CVE-2012-3385](https://insights.sbomify.com/CVE-2012-3385/): Missing authorization in n/a (medium 5.0)
- [CVE-2012-3384](https://insights.sbomify.com/CVE-2012-3384/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2012-3383](https://insights.sbomify.com/CVE-2012-3383/): Cross-site scripting in n/a (low 2.6)
- [CVE-2012-3382](https://insights.sbomify.com/CVE-2012-3382/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-3381](https://insights.sbomify.com/CVE-2012-3381/): Privilege escalation in n/a (medium 4.4)
- [CVE-2012-3380](https://insights.sbomify.com/CVE-2012-3380/): Path traversal in n/a (low 2.1)
- [CVE-2012-3378](https://insights.sbomify.com/CVE-2012-3378/): Path traversal in n/a (low 3.3)
- [CVE-2012-3377](https://insights.sbomify.com/CVE-2012-3377/): Memory corruption in n/a (medium 6.8)
- [CVE-2012-3376](https://insights.sbomify.com/CVE-2012-3376/): Client BlockTokens not checked in Apache Hadoop (high 7.5)
- [CVE-2012-3375](https://insights.sbomify.com/CVE-2012-3375/): Denial of service in n/a (medium 4.9)
- [CVE-2012-3374](https://insights.sbomify.com/CVE-2012-3374/): Memory corruption in n/a (high 7.5)
- [CVE-2012-3373](https://insights.sbomify.com/CVE-2012-3373/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-3372](https://insights.sbomify.com/CVE-2012-3372/): Weak cryptography in n/a (high 7.4)
- [CVE-2012-3371](https://insights.sbomify.com/CVE-2012-3371/): OpenStack Nova Scheduler denial of service through scheduler_hints (low 3.5)
- [CVE-2012-3370](https://insights.sbomify.com/CVE-2012-3370/): Auth bypass in n/a (medium 5.8)
- [CVE-2012-3369](https://insights.sbomify.com/CVE-2012-3369/): Auth bypass in n/a (medium 4.0)
- [CVE-2012-3368](https://insights.sbomify.com/CVE-2012-3368/): Integer overflow in n/a (low 2.6)
- [CVE-2012-3367](https://insights.sbomify.com/CVE-2012-3367/): Missing authorization in n/a (medium 5.5)
- [CVE-2012-3366](https://insights.sbomify.com/CVE-2012-3366/): Command injection in n/a (critical 9.0)
- [CVE-2012-3365](https://insights.sbomify.com/CVE-2012-3365/): Security feature bypass in n/a (medium 5.0)
- [CVE-2012-3364](https://insights.sbomify.com/CVE-2012-3364/): Memory corruption in n/a (medium 5.0)
- [CVE-2012-3363](https://insights.sbomify.com/CVE-2012-3363/): Zend Framework XXE Vulnerability (critical 9.1)
- [CVE-2012-3362](https://insights.sbomify.com/CVE-2012-3362/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2012-3361](https://insights.sbomify.com/CVE-2012-3361/): OpenStack Nova Arbitrary file injection/corruption through directory traversal issues (medium 5.5)
- [CVE-2012-3360](https://insights.sbomify.com/CVE-2012-3360/): OpenStack Nova Directory traversal vulnerability (medium 5.5)
- [CVE-2012-3359](https://insights.sbomify.com/CVE-2012-3359/): Information disclosure in n/a (low 3.7)
- [CVE-2012-3358](https://insights.sbomify.com/CVE-2012-3358/): Memory corruption in n/a (critical 10.0)
- [CVE-2012-3357](https://insights.sbomify.com/CVE-2012-3357/): Information disclosure in n/a (medium 5.0)
- [CVE-2012-3356](https://insights.sbomify.com/CVE-2012-3356/): Auth bypass in n/a (medium 5.0)
- [CVE-2012-3355](https://insights.sbomify.com/CVE-2012-3355/): Path traversal in n/a (low 3.6)
- [CVE-2012-3354](https://insights.sbomify.com/CVE-2012-3354/): Information disclosure in n/a (medium 4.3)
- [CVE-2012-3353](https://insights.sbomify.com/CVE-2012-3353/): Apache Sling JCR ContentLoader XmlReader Arbitrary File Load (high 7.5)
- [CVE-2012-3351](https://insights.sbomify.com/CVE-2012-3351/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2012-3350](https://insights.sbomify.com/CVE-2012-3350/): SQL injection in n/a (medium 6.8)
- [CVE-2012-3347](https://insights.sbomify.com/CVE-2012-3347/): Auth bypass in n/a (medium 6.0)
- [CVE-2012-3345](https://insights.sbomify.com/CVE-2012-3345/): Path traversal in n/a (medium 5.6)
- [CVE-2012-3343](https://insights.sbomify.com/CVE-2012-3343/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2012-3342](https://insights.sbomify.com/CVE-2012-3342/): Other in n/a (critical 10.0)
- [CVE-2012-3341](https://insights.sbomify.com/CVE-2012-3341/): Cross-site scripting in InfoSphere Guardium (medium 6.4)
- [CVE-2012-3340](https://insights.sbomify.com/CVE-2012-3340/): XML external entity in InfoSphere Guardium (medium 4.3)
- [CVE-2012-3338](https://insights.sbomify.com/CVE-2012-3338/): Missing authorization in InfoSphere Guardium (low 3.7)
- [CVE-2012-3337](https://insights.sbomify.com/CVE-2012-3337/): Path traversal in InfoSphere Guardium (medium 5.3)
- [CVE-2012-3336](https://insights.sbomify.com/CVE-2012-3336/): SQL injection in InfoSphere Guardium (medium 6.3)
- [CVE-2012-3334](https://insights.sbomify.com/CVE-2012-3334/): Memory corruption in n/a (critical 9.0)
- [CVE-2012-3333](https://insights.sbomify.com/CVE-2012-3333/): Other in n/a (medium 4.3)
- [CVE-2012-3331](https://insights.sbomify.com/CVE-2012-3331/): Information disclosure in n/a (medium 5.3)
- [CVE-2012-3330](https://insights.sbomify.com/CVE-2012-3330/): Denial of service in n/a (medium 5.0)
- [CVE-2012-3329](https://insights.sbomify.com/CVE-2012-3329/): Path traversal in n/a (low 3.3)
- [CVE-2012-3328](https://insights.sbomify.com/CVE-2012-3328/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-3327](https://insights.sbomify.com/CVE-2012-3327/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-3326](https://insights.sbomify.com/CVE-2012-3326/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-3325](https://insights.sbomify.com/CVE-2012-3325/): Privilege escalation in n/a (medium 6.0)
- [CVE-2012-3324](https://insights.sbomify.com/CVE-2012-3324/): Path traversal in n/a (critical 9.0)
- [CVE-2012-3323](https://insights.sbomify.com/CVE-2012-3323/): Privilege escalation in n/a (medium 6.8)
- [CVE-2012-3322](https://insights.sbomify.com/CVE-2012-3322/): Cross-site scripting in n/a (low 3.5)
- [CVE-2012-3321](https://insights.sbomify.com/CVE-2012-3321/): Auth bypass in n/a (medium 6.5)
- [CVE-2012-3319](https://insights.sbomify.com/CVE-2012-3319/): Information disclosure in n/a (medium 5.0)
- [CVE-2012-3317](https://insights.sbomify.com/CVE-2012-3317/): Privilege escalation in n/a (medium 6.9)
- [CVE-2012-3316](https://insights.sbomify.com/CVE-2012-3316/): Cross-site scripting in n/a (low 3.5)
- [CVE-2012-3315](https://insights.sbomify.com/CVE-2012-3315/): Missing authorization in n/a (medium 5.0)
- [CVE-2012-3314](https://insights.sbomify.com/CVE-2012-3314/): Auth bypass in n/a (medium 5.8)
- [CVE-2012-3313](https://insights.sbomify.com/CVE-2012-3313/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-3312](https://insights.sbomify.com/CVE-2012-3312/): Information disclosure in n/a (medium 5.0)
- [CVE-2012-3311](https://insights.sbomify.com/CVE-2012-3311/): Missing authorization in n/a (low 3.3)
- [CVE-2012-3310](https://insights.sbomify.com/CVE-2012-3310/): Information disclosure in n/a (low 3.5)
- [CVE-2012-3309](https://insights.sbomify.com/CVE-2012-3309/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2012-3308](https://insights.sbomify.com/CVE-2012-3308/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-3306](https://insights.sbomify.com/CVE-2012-3306/): Information disclosure in n/a (medium 6.8)
- [CVE-2012-3305](https://insights.sbomify.com/CVE-2012-3305/): Path traversal in n/a (medium 6.4)
- [CVE-2012-3304](https://insights.sbomify.com/CVE-2012-3304/): Auth bypass in n/a (medium 6.8)
- [CVE-2012-3302](https://insights.sbomify.com/CVE-2012-3302/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-3301](https://insights.sbomify.com/CVE-2012-3301/): Other in n/a (medium 4.3)
- [CVE-2012-3300](https://insights.sbomify.com/CVE-2012-3300/): Denial of service in n/a (low 2.6)
- [CVE-2012-3298](https://insights.sbomify.com/CVE-2012-3298/): Information disclosure in n/a (critical 10.0)
- [CVE-2012-3297](https://insights.sbomify.com/CVE-2012-3297/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-3296](https://insights.sbomify.com/CVE-2012-3296/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-3295](https://insights.sbomify.com/CVE-2012-3295/): Auth bypass in n/a (medium 4.3)
- [CVE-2012-3294](https://insights.sbomify.com/CVE-2012-3294/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2012-3293](https://insights.sbomify.com/CVE-2012-3293/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-3292](https://insights.sbomify.com/CVE-2012-3292/): Privilege escalation in n/a (high 7.6)
- [CVE-2012-3291](https://insights.sbomify.com/CVE-2012-3291/): Memory corruption in n/a (high 7.8)
- [CVE-2012-3290](https://insights.sbomify.com/CVE-2012-3290/): Other in n/a (critical 10.0)
- [CVE-2012-3289](https://insights.sbomify.com/CVE-2012-3289/): Denial of service in n/a (high 7.8)
- [CVE-2012-3288](https://insights.sbomify.com/CVE-2012-3288/): Memory corruption in n/a (critical 9.3)
- [CVE-2012-3287](https://insights.sbomify.com/CVE-2012-3287/): Weak cryptography in n/a (medium 5.0)
- [CVE-2012-3286](https://insights.sbomify.com/CVE-2012-3286/): Information disclosure in n/a (medium 6.5)
- [CVE-2012-3285](https://insights.sbomify.com/CVE-2012-3285/): Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitr (critical 10.0)
- [CVE-2012-3284](https://insights.sbomify.com/CVE-2012-3284/): Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitr (critical 10.0)
- [CVE-2012-3283](https://insights.sbomify.com/CVE-2012-3283/): Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitr (critical 10.0)
- [CVE-2012-3282](https://insights.sbomify.com/CVE-2012-3282/): Code injection in n/a (critical 10.0)
- [CVE-2012-3281](https://insights.sbomify.com/CVE-2012-3281/): Denial of service in n/a (high 7.8)
- [CVE-2012-3280](https://insights.sbomify.com/CVE-2012-3280/): Information disclosure in n/a (medium 6.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2012/page/26/