# Vulnerabilities published in 2012


- [CVE-2012-6290](https://insights.sbomify.com/CVE-2012-6290/): SQL injection in n/a (medium 6.5)
- [CVE-2012-6277](https://insights.sbomify.com/CVE-2012-6277/): Memory corruption in Autonomy KeyView IDOL (high 7.8)
- [CVE-2012-6276](https://insights.sbomify.com/CVE-2012-6276/): Path traversal in n/a (medium 4.3)
- [CVE-2012-6275](https://insights.sbomify.com/CVE-2012-6275/): Memory corruption in n/a (critical 10.0)
- [CVE-2012-6274](https://insights.sbomify.com/CVE-2012-6274/): Missing authorization in n/a (medium 5.0)
- [CVE-2012-6273](https://insights.sbomify.com/CVE-2012-6273/): SQL injection in n/a (high 7.5)
- [CVE-2012-6272](https://insights.sbomify.com/CVE-2012-6272/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-6271](https://insights.sbomify.com/CVE-2012-6271/): Code injection in n/a (critical 9.3)
- [CVE-2012-6270](https://insights.sbomify.com/CVE-2012-6270/): Security feature bypass in n/a (critical 9.3)
- [CVE-2012-6153](https://insights.sbomify.com/CVE-2012-6153/): Improper certificate validation in org.apache.httpcomponents:httpclient (medium 4.3)
- [CVE-2012-6152](https://insights.sbomify.com/CVE-2012-6152/): Denial of service in n/a (medium 5.0)
- [CVE-2012-6151](https://insights.sbomify.com/CVE-2012-6151/): Denial of service in n/a (medium 4.3)
- [CVE-2012-6150](https://insights.sbomify.com/CVE-2012-6150/): Auth bypass in n/a (low 3.6)
- [CVE-2012-6149](https://insights.sbomify.com/CVE-2012-6149/): Cross-site scripting in n/a (low 3.5)
- [CVE-2012-6148](https://insights.sbomify.com/CVE-2012-6148/): Typo3 Function Menu API XSS Vulnerability (low 3.5)
- [CVE-2012-6147](https://insights.sbomify.com/CVE-2012-6147/): Typo3 Backend API XSS Vulnerability (low 3.5)
- [CVE-2012-6146](https://insights.sbomify.com/CVE-2012-6146/): Typo3 Backend History Module Vulnerable to XSS (medium 4.0)
- [CVE-2012-6145](https://insights.sbomify.com/CVE-2012-6145/): Typo3 Backend History Module Vulnerable to XSS (low 3.5)
- [CVE-2012-6144](https://insights.sbomify.com/CVE-2012-6144/): Typo3 Backend History Module Vulnerable to SQL Injection (medium 6.5)
- [CVE-2012-6143](https://insights.sbomify.com/CVE-2012-6143/): Deserialization in n/a (high 7.5)
- [CVE-2012-6142](https://insights.sbomify.com/CVE-2012-6142/): Deserialization in n/a (high 7.5)
- [CVE-2012-6141](https://insights.sbomify.com/CVE-2012-6141/): Deserialization in n/a (high 7.5)
- [CVE-2012-6140](https://insights.sbomify.com/CVE-2012-6140/): Information disclosure in n/a (low 1.9)
- [CVE-2012-6139](https://insights.sbomify.com/CVE-2012-6139/): Null dereference in n/a (medium 5.0)
- [CVE-2012-6137](https://insights.sbomify.com/CVE-2012-6137/): Weak cryptography in n/a (medium 4.3)
- [CVE-2012-6136](https://insights.sbomify.com/CVE-2012-6136/): Misconfiguration in tuned (medium 5.5)
- [CVE-2012-6135](https://insights.sbomify.com/CVE-2012-6135/): RubyGems passenger gem allows remote attackers to delete files (high 7.5)
- [CVE-2012-6134](https://insights.sbomify.com/CVE-2012-6134/): omniauth-oauth2 Cross-Site Request Forgery vulnerability (medium 6.8)
- [CVE-2012-6133](https://insights.sbomify.com/CVE-2012-6133/): Multiple cross-site scripting (XSS) vulnerabilities in Roundup (medium 6.1)
- [CVE-2012-6132](https://insights.sbomify.com/CVE-2012-6132/): Roundup Cross-site Scripting (XSS) vulnerability (medium 4.3)
- [CVE-2012-6131](https://insights.sbomify.com/CVE-2012-6131/): Roundup Cross-site scripting (XSS) vulnerability (medium 4.3)
- [CVE-2012-6130](https://insights.sbomify.com/CVE-2012-6130/): Roundup Cross-site Scripting (XSS) vulnerability (medium 4.3)
- [CVE-2012-6129](https://insights.sbomify.com/CVE-2012-6129/): Memory corruption in n/a (high 7.5)
- [CVE-2012-6128](https://insights.sbomify.com/CVE-2012-6128/): Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (applicati (medium 5.0)
- [CVE-2012-6125](https://insights.sbomify.com/CVE-2012-6125/): Denial of service in chicken (critical 9.8)
- [CVE-2012-6124](https://insights.sbomify.com/CVE-2012-6124/): Weak cryptography in chicken (medium 5.3)
- [CVE-2012-6123](https://insights.sbomify.com/CVE-2012-6123/): Other in chicken (medium 6.5)
- [CVE-2012-6122](https://insights.sbomify.com/CVE-2012-6122/): Memory corruption in chicken (high 7.5)
- [CVE-2012-6121](https://insights.sbomify.com/CVE-2012-6121/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-6120](https://insights.sbomify.com/CVE-2012-6120/): Information disclosure in n/a (low 2.1)
- [CVE-2012-6119](https://insights.sbomify.com/CVE-2012-6119/): Security feature bypass in n/a (low 2.1)
- [CVE-2012-6118](https://insights.sbomify.com/CVE-2012-6118/): Missing authorization in n/a (medium 5.5)
- [CVE-2012-6117](https://insights.sbomify.com/CVE-2012-6117/): Information disclosure in n/a (low 2.1)
- [CVE-2012-6116](https://insights.sbomify.com/CVE-2012-6116/): Misconfiguration in n/a (low 2.1)
- [CVE-2012-6115](https://insights.sbomify.com/CVE-2012-6115/): Information disclosure in n/a (low 2.1)
- [CVE-2012-6114](https://insights.sbomify.com/CVE-2012-6114/): Path traversal in git-extras (medium 5.5)
- [CVE-2012-6113](https://insights.sbomify.com/CVE-2012-6113/): Information disclosure in n/a (medium 5.0)
- [CVE-2012-6112](https://insights.sbomify.com/CVE-2012-6112/): PHP Spellchecker addon for TinyMCE allows attackers to trigger arbitrary outbound HTTP requests (medium 5.0)
- [CVE-2012-6111](https://insights.sbomify.com/CVE-2012-6111/): Information disclosure in gnome-keyring (high 7.5)
- [CVE-2012-6110](https://insights.sbomify.com/CVE-2012-6110/): Missing authorization in n/a (low 2.1)
- [CVE-2012-6109](https://insights.sbomify.com/CVE-2012-6109/): Rack vulnerable to REDoS (medium 4.3)
- [CVE-2012-6108](https://insights.sbomify.com/CVE-2012-6108/): Misconfiguration in n/a (low 2.1)
- [CVE-2012-6107](https://insights.sbomify.com/CVE-2012-6107/): Security feature bypass in n/a (medium 4.3)
- [CVE-2012-6106](https://insights.sbomify.com/CVE-2012-6106/): Missing authorization in n/a (medium 5.5)
- [CVE-2012-6105](https://insights.sbomify.com/CVE-2012-6105/): Information disclosure in n/a (medium 5.0)
- [CVE-2012-6104](https://insights.sbomify.com/CVE-2012-6104/): Information disclosure in n/a (medium 5.0)
- [CVE-2012-6103](https://insights.sbomify.com/CVE-2012-6103/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2012-6102](https://insights.sbomify.com/CVE-2012-6102/): Missing authorization in n/a (medium 6.4)
- [CVE-2012-6101](https://insights.sbomify.com/CVE-2012-6101/): Open redirect in n/a (medium 5.8)
- [CVE-2012-6100](https://insights.sbomify.com/CVE-2012-6100/): Missing authorization in n/a (medium 4.0)
- [CVE-2012-6099](https://insights.sbomify.com/CVE-2012-6099/): Moodle Arbitrary File Read via Backup Functionality (medium 4.0)
- [CVE-2012-6098](https://insights.sbomify.com/CVE-2012-6098/): Missing authorization in n/a (medium 4.0)
- [CVE-2012-6097](https://insights.sbomify.com/CVE-2012-6097/): Information disclosure in n/a (medium 4.3)
- [CVE-2012-6096](https://insights.sbomify.com/CVE-2012-6096/): Memory corruption in n/a (high 7.5)
- [CVE-2012-6095](https://insights.sbomify.com/CVE-2012-6095/): Race condition in n/a (low 1.2)
- [CVE-2012-6094](https://insights.sbomify.com/CVE-2012-6094/): Missing authorization in cups (critical 9.8)
- [CVE-2012-6093](https://insights.sbomify.com/CVE-2012-6093/): Security feature bypass in n/a (medium 4.3)
- [CVE-2012-6092](https://insights.sbomify.com/CVE-2012-6092/): Cross-site Scripting in Apache ActiveMQ (medium 4.3)
- [CVE-2012-6091](https://insights.sbomify.com/CVE-2012-6091/): Information disclosure in Magento (high 7.5)
- [CVE-2012-6090](https://insights.sbomify.com/CVE-2012-6090/): Memory corruption in n/a (high 7.5)
- [CVE-2012-6089](https://insights.sbomify.com/CVE-2012-6089/): Memory corruption in n/a (high 7.5)
- [CVE-2012-6088](https://insights.sbomify.com/CVE-2012-6088/): Security feature bypass in n/a (medium 4.3)
- [CVE-2012-6087](https://insights.sbomify.com/CVE-2012-6087/): Security feature bypass in n/a (medium 5.8)
- [CVE-2012-6086](https://insights.sbomify.com/CVE-2012-6086/): Weak cryptography in n/a (medium 4.3)
- [CVE-2012-6085](https://insights.sbomify.com/CVE-2012-6085/): Denial of service in n/a (medium 5.8)
- [CVE-2012-6084](https://insights.sbomify.com/CVE-2012-6084/): Null dereference in n/a (medium 5.0)
- [CVE-2012-6083](https://insights.sbomify.com/CVE-2012-6083/): Denial of service in freeciv (high 7.5)
- [CVE-2012-6082](https://insights.sbomify.com/CVE-2012-6082/): MoinMoin Cross-site scripting (XSS) vulnerability (medium 4.3)
- [CVE-2012-6081](https://insights.sbomify.com/CVE-2012-6081/): MoinMoin Multiple unrestricted file upload vulnerabilities (medium 6.0)
- [CVE-2012-6080](https://insights.sbomify.com/CVE-2012-6080/): MoinMoin Directory Traversal vulnerability (medium 6.4)
- [CVE-2012-6079](https://insights.sbomify.com/CVE-2012-6079/): Information disclosure in Total Cache (high 7.5)
- [CVE-2012-6078](https://insights.sbomify.com/CVE-2012-6078/): Information disclosure in Total Cache (high 7.5)
- [CVE-2012-6077](https://insights.sbomify.com/CVE-2012-6077/): Information disclosure in Total Cache (high 7.5)
- [CVE-2012-6076](https://insights.sbomify.com/CVE-2012-6076/): Path traversal in n/a (medium 4.4)
- [CVE-2012-6075](https://insights.sbomify.com/CVE-2012-6075/): Memory corruption in n/a (critical 9.3)
- [CVE-2012-6074](https://insights.sbomify.com/CVE-2012-6074/): Jenkins allows Cross-Site Scripting (XSS) (low 3.5)
- [CVE-2012-6073](https://insights.sbomify.com/CVE-2012-6073/): Jenkins affected by Open Redirect Vulnerability (medium 5.8)
- [CVE-2012-6072](https://insights.sbomify.com/CVE-2012-6072/): Jenkins allows HTTP Injection and Response Splitting (medium 4.3)
- [CVE-2012-6071](https://insights.sbomify.com/CVE-2012-6071/): Security feature bypass in nusoap (high 7.5)
- [CVE-2012-6070](https://insights.sbomify.com/CVE-2012-6070/): Falconpl before 0.9.6.9-git20120606 misuses the libcurl API which may allow remote attackers to interfere with security checks. (high 7.5)
- [CVE-2012-6069](https://insights.sbomify.com/CVE-2012-6069/): 3S CoDeSys Relative Path Traversal (critical 10.0)
- [CVE-2012-6068](https://insights.sbomify.com/CVE-2012-6068/): 3S CoDeSys Improper Access Control (critical 9.8)
- [CVE-2012-6067](https://insights.sbomify.com/CVE-2012-6067/): Auth bypass in n/a (critical 10.0)
- [CVE-2012-6066](https://insights.sbomify.com/CVE-2012-6066/): Auth bypass in n/a (critical 9.3)
- [CVE-2012-6065](https://insights.sbomify.com/CVE-2012-6065/): Code injection in n/a (medium 4.6)
- [CVE-2012-6064](https://insights.sbomify.com/CVE-2012-6064/): Path traversal in n/a (low 3.5)
- [CVE-2012-6063](https://insights.sbomify.com/CVE-2012-6063/): Use after free in n/a (high 7.5)
- [CVE-2012-6062](https://insights.sbomify.com/CVE-2012-6062/): Denial of service in n/a (medium 5.0)
- [CVE-2012-6061](https://insights.sbomify.com/CVE-2012-6061/): Integer overflow in n/a (medium 5.0)
- [CVE-2012-6060](https://insights.sbomify.com/CVE-2012-6060/): Integer overflow in n/a (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2012/page/4/