# Vulnerabilities published in 2012


- [CVE-2012-6505](https://insights.sbomify.com/CVE-2012-6505/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-6504](https://insights.sbomify.com/CVE-2012-6504/): SQL injection in n/a (high 7.5)
- [CVE-2012-6503](https://insights.sbomify.com/CVE-2012-6503/): Unspecified vulnerability in the NinjaXplorer component before 1.0.7 for Joomla! (critical 10.0)
- [CVE-2012-6502](https://insights.sbomify.com/CVE-2012-6502/): Information disclosure in n/a (low 2.6)
- [CVE-2012-6501](https://insights.sbomify.com/CVE-2012-6501/): Denial of service in n/a (medium 4.3)
- [CVE-2012-6500](https://insights.sbomify.com/CVE-2012-6500/): Path traversal in n/a (medium 5.0)
- [CVE-2012-6499](https://insights.sbomify.com/CVE-2012-6499/): Open redirect in n/a (medium 5.8)
- [CVE-2012-6498](https://insights.sbomify.com/CVE-2012-6498/): File upload in n/a (medium 6.8)
- [CVE-2012-6497](https://insights.sbomify.com/CVE-2012-6497/): Authlogic Information Exposure vulnerability (medium 5.0)
- [CVE-2012-6496](https://insights.sbomify.com/CVE-2012-6496/): Active Record contains SQL Injection (high 7.5)
- [CVE-2012-6495](https://insights.sbomify.com/CVE-2012-6495/): MoinMoin Multiple vulnerable to directory traversal (medium 6.0)
- [CVE-2012-6494](https://insights.sbomify.com/CVE-2012-6494/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2012-6493](https://insights.sbomify.com/CVE-2012-6493/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2012-6472](https://insights.sbomify.com/CVE-2012-6472/): Information disclosure in n/a (medium 4.6)
- [CVE-2012-6471](https://insights.sbomify.com/CVE-2012-6471/): Other in n/a (medium 5.0)
- [CVE-2012-6470](https://insights.sbomify.com/CVE-2012-6470/): Memory corruption in n/a (critical 9.3)
- [CVE-2012-6469](https://insights.sbomify.com/CVE-2012-6469/): Information disclosure in n/a (medium 5.0)
- [CVE-2012-6468](https://insights.sbomify.com/CVE-2012-6468/): Memory corruption in n/a (critical 9.3)
- [CVE-2012-6467](https://insights.sbomify.com/CVE-2012-6467/): Other in n/a (medium 4.3)
- [CVE-2012-6466](https://insights.sbomify.com/CVE-2012-6466/): Information disclosure in n/a (medium 5.0)
- [CVE-2012-6465](https://insights.sbomify.com/CVE-2012-6465/): Code injection in n/a (critical 9.3)
- [CVE-2012-6464](https://insights.sbomify.com/CVE-2012-6464/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-6463](https://insights.sbomify.com/CVE-2012-6463/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-6462](https://insights.sbomify.com/CVE-2012-6462/): Security feature bypass in n/a (medium 5.0)
- [CVE-2012-6461](https://insights.sbomify.com/CVE-2012-6461/): Security feature bypass in n/a (medium 5.0)
- [CVE-2012-6460](https://insights.sbomify.com/CVE-2012-6460/): Other in n/a (medium 5.0)
- [CVE-2012-6459](https://insights.sbomify.com/CVE-2012-6459/): Information disclosure in n/a (medium 4.3)
- [CVE-2012-6458](https://insights.sbomify.com/CVE-2012-6458/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-6453](https://insights.sbomify.com/CVE-2012-6453/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-6452](https://insights.sbomify.com/CVE-2012-6452/): Information disclosure in n/a (medium 5.0)
- [CVE-2012-6451](https://insights.sbomify.com/CVE-2012-6451/): Auth bypass in n/a (critical 9.8)
- [CVE-2012-6449](https://insights.sbomify.com/CVE-2012-6449/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2012-6448](https://insights.sbomify.com/CVE-2012-6448/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2012-6447](https://insights.sbomify.com/CVE-2012-6447/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-6442](https://insights.sbomify.com/CVE-2012-6442/): Rockwell Automation ControlLogix PLC Improper Access Control (high 7.8)
- [CVE-2012-6441](https://insights.sbomify.com/CVE-2012-6441/): Rockwell Automation ControlLogix PLC Information Exposure (medium 5.0)
- [CVE-2012-6440](https://insights.sbomify.com/CVE-2012-6440/): Rockwell Automation ControlLogix PLC Improper Input Validation (critical 9.3)
- [CVE-2012-6439](https://insights.sbomify.com/CVE-2012-6439/): Rockwell Automation ControlLogix PLC Improper Access Control (high 8.5)
- [CVE-2012-6438](https://insights.sbomify.com/CVE-2012-6438/): Rockwell Automation ControlLogix PLC Improper Input Validation (high 7.8)
- [CVE-2012-6437](https://insights.sbomify.com/CVE-2012-6437/): Rockwell Automation ControlLogix PLC Improper Authentication (critical 10.0)
- [CVE-2012-6436](https://insights.sbomify.com/CVE-2012-6436/): Rockwell Automation ControlLogix PLC Improper Input Validation (high 7.8)
- [CVE-2012-6435](https://insights.sbomify.com/CVE-2012-6435/): Rockwell Automation ControlLogix PLC Improper Access Control (high 7.8)
- [CVE-2012-6434](https://insights.sbomify.com/CVE-2012-6434/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2012-6433](https://insights.sbomify.com/CVE-2012-6433/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2012-6432](https://insights.sbomify.com/CVE-2012-6432/): Symfony Access Control Vulnerability (medium 6.8)
- [CVE-2012-6431](https://insights.sbomify.com/CVE-2012-6431/): Symfony Allows URI Restrictions Bypass Via Double-Encoded String (medium 6.4)
- [CVE-2012-6430](https://insights.sbomify.com/CVE-2012-6430/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-6429](https://insights.sbomify.com/CVE-2012-6429/): Memory corruption in n/a (critical 10.0)
- [CVE-2012-6428](https://insights.sbomify.com/CVE-2012-6428/): Carlo Gavazzi EOS Box Hard-Coded Credentials (critical 10.0)
- [CVE-2012-6427](https://insights.sbomify.com/CVE-2012-6427/): Carlo Gavazzi EOS Box SQL Injection (high 7.8)
- [CVE-2012-6426](https://insights.sbomify.com/CVE-2012-6426/): Auth bypass in n/a (high 7.5)
- [CVE-2012-6422](https://insights.sbomify.com/CVE-2012-6422/): Privilege escalation in n/a (critical 9.3)
- [CVE-2012-6399](https://insights.sbomify.com/CVE-2012-6399/): Security feature bypass in n/a (medium 5.8)
- [CVE-2012-6397](https://insights.sbomify.com/CVE-2012-6397/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-6396](https://insights.sbomify.com/CVE-2012-6396/): Denial of service in n/a (medium 4.9)
- [CVE-2012-6395](https://insights.sbomify.com/CVE-2012-6395/): Denial of service in n/a (medium 6.3)
- [CVE-2012-6392](https://insights.sbomify.com/CVE-2012-6392/): Auth bypass in n/a (critical 10.0)
- [CVE-2012-6371](https://insights.sbomify.com/CVE-2012-6371/): Weak cryptography in n/a (low 3.3)
- [CVE-2012-6369](https://insights.sbomify.com/CVE-2012-6369/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-6360](https://insights.sbomify.com/CVE-2012-6360/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-6359](https://insights.sbomify.com/CVE-2012-6359/): Security feature bypass in n/a (medium 4.3)
- [CVE-2012-6357](https://insights.sbomify.com/CVE-2012-6357/): Privilege escalation in n/a (medium 6.5)
- [CVE-2012-6356](https://insights.sbomify.com/CVE-2012-6356/): Privilege escalation in n/a (medium 6.5)
- [CVE-2012-6355](https://insights.sbomify.com/CVE-2012-6355/): Privilege escalation in n/a (medium 6.5)
- [CVE-2012-6354](https://insights.sbomify.com/CVE-2012-6354/): Auth bypass in n/a (high 7.5)
- [CVE-2012-6352](https://insights.sbomify.com/CVE-2012-6352/): Denial of service in n/a (medium 5.0)
- [CVE-2012-6350](https://insights.sbomify.com/CVE-2012-6350/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-6349](https://insights.sbomify.com/CVE-2012-6349/): Memory corruption in n/a (critical 9.3)
- [CVE-2012-6348](https://insights.sbomify.com/CVE-2012-6348/): Path traversal in n/a (low 3.3)
- [CVE-2012-6347](https://insights.sbomify.com/CVE-2012-6347/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2012-6346](https://insights.sbomify.com/CVE-2012-6346/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2012-6345](https://insights.sbomify.com/CVE-2012-6345/): Information disclosure in n/a (high 7.5)
- [CVE-2012-6344](https://insights.sbomify.com/CVE-2012-6344/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2012-6342](https://insights.sbomify.com/CVE-2012-6342/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2012-6341](https://insights.sbomify.com/CVE-2012-6341/): Information disclosure in n/a (medium 6.5)
- [CVE-2012-6340](https://insights.sbomify.com/CVE-2012-6340/): Hardcoded credentials in n/a (medium 4.6)
- [CVE-2012-6339](https://insights.sbomify.com/CVE-2012-6339/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-6337](https://insights.sbomify.com/CVE-2012-6337/): Information disclosure in n/a (low 3.3)
- [CVE-2012-6336](https://insights.sbomify.com/CVE-2012-6336/): Other in n/a (low 3.3)
- [CVE-2012-6335](https://insights.sbomify.com/CVE-2012-6335/): Security feature bypass in n/a (low 3.3)
- [CVE-2012-6334](https://insights.sbomify.com/CVE-2012-6334/): Security feature bypass in n/a (low 2.9)
- [CVE-2012-6333](https://insights.sbomify.com/CVE-2012-6333/): Denial of service in n/a (medium 4.7)
- [CVE-2012-6330](https://insights.sbomify.com/CVE-2012-6330/): Denial of service in n/a (medium 5.0)
- [CVE-2012-6329](https://insights.sbomify.com/CVE-2012-6329/): Code injection in n/a (high 7.5)
- [CVE-2012-6326](https://insights.sbomify.com/CVE-2012-6326/): Denial of service in n/a (high 7.8)
- [CVE-2012-6325](https://insights.sbomify.com/CVE-2012-6325/): XML external entity in n/a (medium 4.0)
- [CVE-2012-6324](https://insights.sbomify.com/CVE-2012-6324/): Path traversal in n/a (medium 4.0)
- [CVE-2012-6316](https://insights.sbomify.com/CVE-2012-6316/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-6314](https://insights.sbomify.com/CVE-2012-6314/): Security feature bypass in n/a (medium 5.0)
- [CVE-2012-6313](https://insights.sbomify.com/CVE-2012-6313/): Information disclosure in n/a (medium 5.0)
- [CVE-2012-6312](https://insights.sbomify.com/CVE-2012-6312/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-6309](https://insights.sbomify.com/CVE-2012-6309/): Denial of service in n/a (high 7.5)
- [CVE-2012-6307](https://insights.sbomify.com/CVE-2012-6307/): Memory corruption in n/a (high 8.8)
- [CVE-2012-6306](https://insights.sbomify.com/CVE-2012-6306/): Memory corruption in n/a (critical 9.8)
- [CVE-2012-6303](https://insights.sbomify.com/CVE-2012-6303/): Memory corruption in n/a (medium 6.8)
- [CVE-2012-6302](https://insights.sbomify.com/CVE-2012-6302/): Security feature bypass in n/a (high 7.8)
- [CVE-2012-6301](https://insights.sbomify.com/CVE-2012-6301/): Denial of service in n/a (medium 5.0)
- [CVE-2012-6299](https://insights.sbomify.com/CVE-2012-6299/): Auth bypass in n/a (critical 10.0)
- [CVE-2012-6298](https://insights.sbomify.com/CVE-2012-6298/): Command injection in n/a (critical 10.0)
- [CVE-2012-6297](https://insights.sbomify.com/CVE-2012-6297/): Command injection in n/a (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2012/page/3/
