# Vulnerabilities published in 2012


- [CVE-2012-1639](https://insights.sbomify.com/CVE-2012-1639/): Cross-site scripting in commerceguys:commerce (low 3.5)
- [CVE-2012-1638](https://insights.sbomify.com/CVE-2012-1638/): SQL injection in dominique clause:search autocomplete (medium 6.0)
- [CVE-2012-1637](https://insights.sbomify.com/CVE-2012-1637/): Cross-site scripting in Quicktabs (medium 4.8)
- [CVE-2012-1636](https://insights.sbomify.com/CVE-2012-1636/): Cross-site request forgery in luke herrington:stickynote (medium 4.3)
- [CVE-2012-1635](https://insights.sbomify.com/CVE-2012-1635/): Missing authorization in rik de boer:revisioning (medium 6.4)
- [CVE-2012-1634](https://insights.sbomify.com/CVE-2012-1634/): Cross-site scripting in hans nilsson:video filter (medium 4.3)
- [CVE-2012-1633](https://insights.sbomify.com/CVE-2012-1633/): Cross-site request forgery in erikwebb:password policy (medium 6.8)
- [CVE-2012-1632](https://insights.sbomify.com/CVE-2012-1632/): Cross-site scripting in erik webb:password policy (low 2.1)
- [CVE-2012-1631](https://insights.sbomify.com/CVE-2012-1631/): Cross-site request forgery in databasepublish:admin\ (medium 6.8)
- [CVE-2012-1630](https://insights.sbomify.com/CVE-2012-1630/): Cross-site scripting in nestor mata cuthbert:taxonomy navigator (low 2.1)
- [CVE-2012-1629](https://insights.sbomify.com/CVE-2012-1629/): Cross-site scripting in dmitry loac:taxotouch (low 2.1)
- [CVE-2012-1628](https://insights.sbomify.com/CVE-2012-1628/): Cross-site scripting in 63reasons:supercron (low 3.5)
- [CVE-2012-1627](https://insights.sbomify.com/CVE-2012-1627/): Cross-site scripting in marvil07:vote up down (low 3.5)
- [CVE-2012-1626](https://insights.sbomify.com/CVE-2012-1626/): SQL injection in karen stevenson:date (medium 6.0)
- [CVE-2012-1625](https://insights.sbomify.com/CVE-2012-1625/): Code injection in wizonesolutions:fillpdf (medium 6.0)
- [CVE-2012-1624](https://insights.sbomify.com/CVE-2012-1624/): Cross-site scripting in lingotek:ray enterprise translation (low 3.5)
- [CVE-2012-1623](https://insights.sbomify.com/CVE-2012-1623/): Missing authorization in aidanlister:regcode (medium 5.0)
- [CVE-2012-1622](https://insights.sbomify.com/CVE-2012-1622/): Other in apache:ofbiz (critical 9.8)
- [CVE-2012-1621](https://insights.sbomify.com/CVE-2012-1621/): Cross-site scripting in apache:ofbiz (medium 4.3)
- [CVE-2012-1620](https://insights.sbomify.com/CVE-2012-1620/): Security feature bypass in suckless:slock (low 3.6)
- [CVE-2012-1618](https://insights.sbomify.com/CVE-2012-1618/): Unescaped parameters in the PostgreSQL JDBC driver (high 7.5)
- [CVE-2012-1617](https://insights.sbomify.com/CVE-2012-1617/): Path traversal in juan ramon:osclass (medium 6.4)
- [CVE-2012-1616](https://insights.sbomify.com/CVE-2012-1616/): Use after free in argyllcms:argyllcms (critical 9.3)
- [CVE-2012-1615](https://insights.sbomify.com/CVE-2012-1615/): Privilege escalation in sectool (high 7.8)
- [CVE-2012-1614](https://insights.sbomify.com/CVE-2012-1614/): Information disclosure in coppermine-gallery:coppermine photo gallery (medium 5.0)
- [CVE-2012-1613](https://insights.sbomify.com/CVE-2012-1613/): Cross-site scripting in coppermine-gallery:coppermine photo gallery (low 3.5)
- [CVE-2012-1612](https://insights.sbomify.com/CVE-2012-1612/): Cross-site scripting in joomla:joomla\! (medium 4.3)
- [CVE-2012-1611](https://insights.sbomify.com/CVE-2012-1611/): Missing authorization in joomla:joomla\! (medium 5.0)
- [CVE-2012-1610](https://insights.sbomify.com/CVE-2012-1610/): Integer overflow in canonical:ubuntu linux (high 7.5)
- [CVE-2012-1608](https://insights.sbomify.com/CVE-2012-1608/): Typo3 API XSS Vulnerabilities (medium 5.0)
- [CVE-2012-1607](https://insights.sbomify.com/CVE-2012-1607/): TYPO3 allows remote attackers to obtain the database name via a direct request (medium 5.0)
- [CVE-2012-1606](https://insights.sbomify.com/CVE-2012-1606/): Typo3 Backend XSS Vulnerabilities (low 3.5)
- [CVE-2012-1605](https://insights.sbomify.com/CVE-2012-1605/): Typo3 Extbase Framework Unsafe Deserialization (medium 5.0)
- [CVE-2012-1604](https://insights.sbomify.com/CVE-2012-1604/): Cross-site scripting in nextbbs:nextbbs (medium 4.3)
- [CVE-2012-1603](https://insights.sbomify.com/CVE-2012-1603/): SQL injection in nextbbs:nextbbs (high 7.5)
- [CVE-2012-1602](https://insights.sbomify.com/CVE-2012-1602/): Auth bypass in nextbbs:nextbbs (high 7.5)
- [CVE-2012-1601](https://insights.sbomify.com/CVE-2012-1601/): Null dereference in linux:linux kernel (medium 4.9)
- [CVE-2012-1600](https://insights.sbomify.com/CVE-2012-1600/): Cross-site scripting in opensuse:opensuse (medium 4.3)
- [CVE-2012-1599](https://insights.sbomify.com/CVE-2012-1599/): Missing authorization in joomla:joomla\! (medium 5.0)
- [CVE-2012-1598](https://insights.sbomify.com/CVE-2012-1598/): Weak cryptography in joomla:joomla\! (high 7.5)
- [CVE-2012-1597](https://insights.sbomify.com/CVE-2012-1597/): Cross-site scripting in ez:ezjscore (low 2.6)
- [CVE-2012-1596](https://insights.sbomify.com/CVE-2012-1596/): Denial of service in wireshark:wireshark (medium 5.0)
- [CVE-2012-1595](https://insights.sbomify.com/CVE-2012-1595/): Denial of service in wireshark:wireshark (medium 4.3)
- [CVE-2012-1594](https://insights.sbomify.com/CVE-2012-1594/): Denial of service in wireshark:wireshark (low 3.3)
- [CVE-2012-1593](https://insights.sbomify.com/CVE-2012-1593/): Null dereference in wireshark:wireshark (low 3.3)
- [CVE-2012-1592](https://insights.sbomify.com/CVE-2012-1592/): Unrestricted Upload of File with Dangerous Type in Apache Struts2 (high 8.8)
- [CVE-2012-1591](https://insights.sbomify.com/CVE-2012-1591/): Missing authorization in drupal:drupal (medium 5.0)
- [CVE-2012-1590](https://insights.sbomify.com/CVE-2012-1590/): Missing authorization in drupal:drupal (medium 4.0)
- [CVE-2012-1589](https://insights.sbomify.com/CVE-2012-1589/): Drupal Open Redirect (medium 5.8)
- [CVE-2012-1588](https://insights.sbomify.com/CVE-2012-1588/): Denial of service in drupal:drupal (low 3.5)
- [CVE-2012-1586](https://insights.sbomify.com/CVE-2012-1586/): Information disclosure in debian:cifs-utils (low 2.1)
- [CVE-2012-1585](https://insights.sbomify.com/CVE-2012-1585/): OpenStack Nova Long server names grow nova-api log files significantly (medium 4.0)
- [CVE-2012-1584](https://insights.sbomify.com/CVE-2012-1584/): Integer overflow in scott wheeler:taglib (medium 4.3)
- [CVE-2012-1583](https://insights.sbomify.com/CVE-2012-1583/): Memory corruption in linux:linux kernel (medium 5.0)
- [CVE-2012-1582](https://insights.sbomify.com/CVE-2012-1582/): Cross-site scripting in mediawiki:mediawiki (medium 4.3)
- [CVE-2012-1581](https://insights.sbomify.com/CVE-2012-1581/): Weak cryptography in mediawiki:mediawiki (medium 5.0)
- [CVE-2012-1580](https://insights.sbomify.com/CVE-2012-1580/): Cross-site request forgery in mediawiki:mediawiki (medium 6.8)
- [CVE-2012-1579](https://insights.sbomify.com/CVE-2012-1579/): Information disclosure in mediawiki:mediawiki (medium 5.0)
- [CVE-2012-1578](https://insights.sbomify.com/CVE-2012-1578/): Cross-site request forgery in mediawiki:mediawiki (medium 6.8)
- [CVE-2012-1577](https://insights.sbomify.com/CVE-2012-1577/): Weak cryptography in dietlibc (critical 9.8)
- [CVE-2012-1576](https://insights.sbomify.com/CVE-2012-1576/): Auth bypass in atheme:atheme (medium 6.0)
- [CVE-2012-1575](https://insights.sbomify.com/CVE-2012-1575/): Cross-site scripting in trevor mckay:cumin (medium 4.3)
- [CVE-2012-1574](https://insights.sbomify.com/CVE-2012-1574/): Apache Hadoop allows impersonation of arbitrary cluster user accounts (medium 6.5)
- [CVE-2012-1573](https://insights.sbomify.com/CVE-2012-1573/): Memory corruption in gnu:gnutls (medium 5.0)
- [CVE-2012-1572](https://insights.sbomify.com/CVE-2012-1572/): Denial of service in Keystone (high 7.5)
- [CVE-2012-1571](https://insights.sbomify.com/CVE-2012-1571/): Memory corruption in christos zoulas:file (medium 6.5)
- [CVE-2012-1570](https://insights.sbomify.com/CVE-2012-1570/): Business logic in maradns:maradns (medium 4.3)
- [CVE-2012-1569](https://insights.sbomify.com/CVE-2012-1569/): Memory corruption in gnu:gnutls (medium 5.0)
- [CVE-2012-1568](https://insights.sbomify.com/CVE-2012-1568/): Security feature bypass in fedoraproject:fedora (low 1.9)
- [CVE-2012-1567](https://insights.sbomify.com/CVE-2012-1567/): Other in Mint (high 7.5)
- [CVE-2012-1566](https://insights.sbomify.com/CVE-2012-1566/): Other in Mint (high 7.5)
- [CVE-2012-1565](https://insights.sbomify.com/CVE-2012-1565/): Missing authorization in ez:ez publish (high 7.5)
- [CVE-2012-1564](https://insights.sbomify.com/CVE-2012-1564/): Cross-site scripting in yuriy v semenikhin:yvs image gallery (medium 4.3)
- [CVE-2012-1563](https://insights.sbomify.com/CVE-2012-1563/): Privilege escalation in Joomla! (high 7.5)
- [CVE-2012-1562](https://insights.sbomify.com/CVE-2012-1562/): Weak cryptography in Joomla! core (high 7.5)
- [CVE-2012-1561](https://insights.sbomify.com/CVE-2012-1561/): Cross-site scripting in danielb:finder (medium 4.3)
- [CVE-2012-1558](https://insights.sbomify.com/CVE-2012-1558/): Null dereference in yassl:cyassl (medium 5.0)
- [CVE-2012-1557](https://insights.sbomify.com/CVE-2012-1557/): SQL injection in parallels:parallels plesk panel (high 7.5)
- [CVE-2012-1556](https://insights.sbomify.com/CVE-2012-1556/): Cross-site scripting in synology:diskstation manager (medium 4.3)
- [CVE-2012-1545](https://insights.sbomify.com/CVE-2012-1545/): Memory corruption in microsoft:ie (medium 5.8)
- [CVE-2012-1543](https://insights.sbomify.com/CVE-2012-1543/): Other in oracle:javafx (high 7.6)
- [CVE-2012-1541](https://insights.sbomify.com/CVE-2012-1541/): Use after free in oracle:jdk (critical 10.0)
- [CVE-2012-1539](https://insights.sbomify.com/CVE-2012-1539/): Use after free in microsoft:internet explorer (high 8.1)
- [CVE-2012-1538](https://insights.sbomify.com/CVE-2012-1538/): Use after free in microsoft:internet explorer (critical 9.3)
- [CVE-2012-1537](https://insights.sbomify.com/CVE-2012-1537/): Memory corruption in microsoft:directx (critical 9.3)
- [CVE-2012-1535](https://insights.sbomify.com/CVE-2012-1535/): Adobe Flash Player Arbitrary Code Execution (high 7.8, exploited in the wild)
- [CVE-2012-1533](https://insights.sbomify.com/CVE-2012-1533/): Other in oracle:jdk (critical 10.0)
- [CVE-2012-1532](https://insights.sbomify.com/CVE-2012-1532/): Other in oracle:jdk (critical 10.0)
- [CVE-2012-1531](https://insights.sbomify.com/CVE-2012-1531/): Other in oracle:javafx (critical 10.0)
- [CVE-2012-1530](https://insights.sbomify.com/CVE-2012-1530/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2012-1529](https://insights.sbomify.com/CVE-2012-1529/): Use after free in microsoft:internet explorer (critical 9.3)
- [CVE-2012-1528](https://insights.sbomify.com/CVE-2012-1528/): Integer overflow in microsoft:windows 7 (critical 9.3)
- [CVE-2012-1527](https://insights.sbomify.com/CVE-2012-1527/): Integer overflow in microsoft:windows 7 (critical 9.3)
- [CVE-2012-1526](https://insights.sbomify.com/CVE-2012-1526/): Use after free in microsoft:internet explorer (critical 9.3)
- [CVE-2012-1525](https://insights.sbomify.com/CVE-2012-1525/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2012-1524](https://insights.sbomify.com/CVE-2012-1524/): Use after free in microsoft:internet explorer (critical 9.3)
- [CVE-2012-1523](https://insights.sbomify.com/CVE-2012-1523/): Use after free in microsoft:internet explorer (critical 9.3)
- [CVE-2012-1522](https://insights.sbomify.com/CVE-2012-1522/): Use after free in microsoft:internet explorer (critical 9.3)
- [CVE-2012-1521](https://insights.sbomify.com/CVE-2012-1521/): Use after free in apple:iphone os (medium 6.8)
- [CVE-2012-1520](https://insights.sbomify.com/CVE-2012-1520/): Memory corruption in apple:safari (critical 9.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2012/page/41/