# Vulnerabilities published in 2012


- [CVE-2012-1122](https://insights.sbomify.com/CVE-2012-1122/): Missing authorization in mantisbt:mantisbt (low 3.6)
- [CVE-2012-1121](https://insights.sbomify.com/CVE-2012-1121/): Missing authorization in mantisbt:mantisbt (medium 4.9)
- [CVE-2012-1120](https://insights.sbomify.com/CVE-2012-1120/): Missing authorization in mantisbt:mantisbt (low 3.6)
- [CVE-2012-1119](https://insights.sbomify.com/CVE-2012-1119/): Security feature bypass in mantisbt:mantisbt (medium 6.4)
- [CVE-2012-1118](https://insights.sbomify.com/CVE-2012-1118/): Missing authorization in mantisbt:mantisbt (medium 4.3)
- [CVE-2012-1117](https://insights.sbomify.com/CVE-2012-1117/): Cross-site scripting in joomla:joomla\! (medium 4.3)
- [CVE-2012-1116](https://insights.sbomify.com/CVE-2012-1116/): SQL injection in joomla:joomla\! (high 7.5)
- [CVE-2012-1115](https://insights.sbomify.com/CVE-2012-1115/): Cross-site scripting in LDAP Account Manager (LAM) Pro (medium 6.1)
- [CVE-2012-1114](https://insights.sbomify.com/CVE-2012-1114/): Cross-site scripting in LDAP Account Manager (LAM) (medium 6.1)
- [CVE-2012-1113](https://insights.sbomify.com/CVE-2012-1113/): Cross-site scripting in maian:gallery (medium 4.3)
- [CVE-2012-1112](https://insights.sbomify.com/CVE-2012-1112/): Path traversal in open-realty:open-realty (medium 6.8)
- [CVE-2012-1111](https://insights.sbomify.com/CVE-2012-1111/): Other in robert ancell:lightdm (medium 4.6)
- [CVE-2012-1110](https://insights.sbomify.com/CVE-2012-1110/): Cross-site scripting in datemill:etano (medium 4.3)
- [CVE-2012-1109](https://insights.sbomify.com/CVE-2012-1109/): Denial of service in mwlib (high 7.5)
- [CVE-2012-1108](https://insights.sbomify.com/CVE-2012-1108/): Denial of service in scott wheeler:taglib (medium 4.3)
- [CVE-2012-1107](https://insights.sbomify.com/CVE-2012-1107/): Denial of service in scott wheeler:taglib (medium 4.3)
- [CVE-2012-1106](https://insights.sbomify.com/CVE-2012-1106/): Information disclosure in redhat:automatic bug reporting tool (low 1.9)
- [CVE-2012-1105](https://insights.sbomify.com/CVE-2012-1105/): Information disclosure in php-pear-CAS (medium 5.5)
- [CVE-2012-1104](https://insights.sbomify.com/CVE-2012-1104/): Security feature bypass in phpCAS (medium 5.3)
- [CVE-2012-1103](https://insights.sbomify.com/CVE-2012-1103/): Path traversal in notmuchmail:notmuch (medium 4.3)
- [CVE-2012-1102](https://insights.sbomify.com/CVE-2012-1102/): XML external entity in perl-xml-atom (high 7.5)
- [CVE-2012-1101](https://insights.sbomify.com/CVE-2012-1101/): Denial of service in systemd (medium 5.5)
- [CVE-2012-1100](https://insights.sbomify.com/CVE-2012-1100/): Auth bypass in redhat:jboss operations network (medium 5.8)
- [CVE-2012-1099](https://insights.sbomify.com/CVE-2012-1099/): Cross-site Scripting in actionpack (medium 4.3)
- [CVE-2012-1098](https://insights.sbomify.com/CVE-2012-1098/): activesupport Cross-site Scripting vulnerability (medium 4.3)
- [CVE-2012-1097](https://insights.sbomify.com/CVE-2012-1097/): Null dereference in linux:linux kernel (high 7.8)
- [CVE-2012-1096](https://insights.sbomify.com/CVE-2012-1096/): Security feature bypass in NetworkManager (medium 5.5)
- [CVE-2012-1095](https://insights.sbomify.com/CVE-2012-1095/): Command injection in opensuse:opensuse (medium 4.3)
- [CVE-2012-1094](https://insights.sbomify.com/CVE-2012-1094/): JBoss AS may expose root content if excluded-contexts list is mismatched (high 7.5)
- [CVE-2012-1093](https://insights.sbomify.com/CVE-2012-1093/): Privilege escalation in x11-common (high 7.8)
- [CVE-2012-1090](https://insights.sbomify.com/CVE-2012-1090/): Denial of service in linux:linux kernel (medium 5.5)
- [CVE-2012-1089](https://insights.sbomify.com/CVE-2012-1089/): Path traversal in apache:wicket (medium 5.0)
- [CVE-2012-1088](https://insights.sbomify.com/CVE-2012-1088/): Race condition in iproute2 project:iproute2 (low 3.3)
- [CVE-2012-1087](https://insights.sbomify.com/CVE-2012-1087/): Cross-site scripting in bluechip:bc post2facebook (medium 4.3)
- [CVE-2012-1086](https://insights.sbomify.com/CVE-2012-1086/): Cross-site scripting in typo3:aeurltool (medium 4.3)
- [CVE-2012-1085](https://insights.sbomify.com/CVE-2012-1085/): Information disclosure in typo3:beuserswitch (medium 5.0)
- [CVE-2012-1084](https://insights.sbomify.com/CVE-2012-1084/): Cross-site scripting in typo3:beuserswitch (medium 4.3)
- [CVE-2012-1083](https://insights.sbomify.com/CVE-2012-1083/): Cross-site request forgery in typo3:terminal (medium 6.8)
- [CVE-2012-1082](https://insights.sbomify.com/CVE-2012-1082/): Cross-site scripting in typo3:terminal (low 3.5)
- [CVE-2012-1081](https://insights.sbomify.com/CVE-2012-1081/): Cross-site scripting in roderick braun:ya googlesearch (medium 4.3)
- [CVE-2012-1080](https://insights.sbomify.com/CVE-2012-1080/): Cross-site scripting in typo3:skt eurocalc (medium 4.3)
- [CVE-2012-1079](https://insights.sbomify.com/CVE-2012-1079/): Code injection in helmut hummel:typo3 webservice (medium 6.5)
- [CVE-2012-1078](https://insights.sbomify.com/CVE-2012-1078/): Information disclosure in claus due:sysutils (medium 5.0)
- [CVE-2012-1077](https://insights.sbomify.com/CVE-2012-1077/): SQL injection in manfred egger:bc post2facebook (high 7.5)
- [CVE-2012-1076](https://insights.sbomify.com/CVE-2012-1076/): Cross-site scripting in robert gonda:rtg files (medium 4.3)
- [CVE-2012-1075](https://insights.sbomify.com/CVE-2012-1075/): SQL injection in robert gonda:rtg files (high 7.5)
- [CVE-2012-1074](https://insights.sbomify.com/CVE-2012-1074/): SQL injection in typo3:mm whtppr (high 7.5)
- [CVE-2012-1073](https://insights.sbomify.com/CVE-2012-1073/): Cross-site scripting in typo3:toi category (medium 4.3)
- [CVE-2012-1072](https://insights.sbomify.com/CVE-2012-1072/): SQL injection in typo3:toi category (high 7.5)
- [CVE-2012-1071](https://insights.sbomify.com/CVE-2012-1071/): SQL injection in mathieu vidal:mv cooking (high 7.5)
- [CVE-2012-1070](https://insights.sbomify.com/CVE-2012-1070/): Cross-site scripting in netcreators:irfaq (medium 4.3)
- [CVE-2012-1069](https://insights.sbomify.com/CVE-2012-1069/): Cross-site scripting in instantphp:lknsupport (medium 4.3)
- [CVE-2012-1068](https://insights.sbomify.com/CVE-2012-1068/): Cross-site scripting in mg12:wp-recentcomments (medium 4.3)
- [CVE-2012-1067](https://insights.sbomify.com/CVE-2012-1067/): SQL injection in mg12:wp-recentcomments (high 7.5)
- [CVE-2012-1066](https://insights.sbomify.com/CVE-2012-1066/): Cross-site scripting in smartycms:smartycms (medium 4.3)
- [CVE-2012-1065](https://insights.sbomify.com/CVE-2012-1065/): Other in 2x:applicationserver (medium 4.3)
- [CVE-2012-1064](https://insights.sbomify.com/CVE-2012-1064/): Cross-site scripting in emc:rsa archer egrc (medium 4.3)
- [CVE-2012-1063](https://insights.sbomify.com/CVE-2012-1063/): SQL injection in manageengine:applications manager (high 7.5)
- [CVE-2012-1062](https://insights.sbomify.com/CVE-2012-1062/): Cross-site scripting in manageengine:applications manager (medium 4.3)
- [CVE-2012-1061](https://insights.sbomify.com/CVE-2012-1061/): SQL injection in gforgegroup:gforge (high 7.5)
- [CVE-2012-1060](https://insights.sbomify.com/CVE-2012-1060/): Cross-site scripting in rik de boer:revisioning (low 2.1)
- [CVE-2012-1059](https://insights.sbomify.com/CVE-2012-1059/): Cross-site scripting in oscommerce:online merchant (medium 4.3)
- [CVE-2012-1058](https://insights.sbomify.com/CVE-2012-1058/): Cross-site request forgery in flyspray:flyspray (medium 6.0)
- [CVE-2012-1057](https://insights.sbomify.com/CVE-2012-1057/): Cross-site request forgery in sean robertson:forward (medium 6.0)
- [CVE-2012-1056](https://insights.sbomify.com/CVE-2012-1056/): Missing authorization in sean robertson:forward (medium 5.0)
- [CVE-2012-1055](https://insights.sbomify.com/CVE-2012-1055/): Memory corruption in pl32:photoline (medium 6.8)
- [CVE-2012-1054](https://insights.sbomify.com/CVE-2012-1054/): Privilege escalation in puppet:puppet (medium 4.4)
- [CVE-2012-1053](https://insights.sbomify.com/CVE-2012-1053/): Puppet Privilege Escallation (medium 6.9)
- [CVE-2012-1052](https://insights.sbomify.com/CVE-2012-1052/): Memory corruption in ivanview:ivanview (medium 6.8)
- [CVE-2012-1051](https://insights.sbomify.com/CVE-2012-1051/): Memory corruption in xnview:xnview (medium 6.8)
- [CVE-2012-1050](https://insights.sbomify.com/CVE-2012-1050/): Path traversal in mathopd:mathopd (medium 4.3)
- [CVE-2012-1049](https://insights.sbomify.com/CVE-2012-1049/): Cross-site scripting in manageengine:admanager plus (medium 4.3)
- [CVE-2012-1048](https://insights.sbomify.com/CVE-2012-1048/): Cross-site scripting in efrontlearning:efront community \+\+ (medium 4.3)
- [CVE-2012-1047](https://insights.sbomify.com/CVE-2012-1047/): Path traversal in cyberoam:cyberoam central console (high 7.5)
- [CVE-2012-1046](https://insights.sbomify.com/CVE-2012-1046/): Cross-site scripting in ibm:cognos tm1 (medium 4.3)
- [CVE-2012-1039](https://insights.sbomify.com/CVE-2012-1039/): Cross-site scripting in dotclear:dotclear (medium 4.3)
- [CVE-2012-1038](https://insights.sbomify.com/CVE-2012-1038/): Cross-site scripting in juniper:networks mobility system software (medium 4.3)
- [CVE-2012-1037](https://insights.sbomify.com/CVE-2012-1037/): Code injection in glpi-project:glpi (medium 6.5)
- [CVE-2012-1036](https://insights.sbomify.com/CVE-2012-1036/): Cross-site scripting in dnnsoftware:dotnetnuke (medium 4.3)
- [CVE-2012-1035](https://insights.sbomify.com/CVE-2012-1035/): Denial of service in adacore:ada web services (medium 5.0)
- [CVE-2012-1034](https://insights.sbomify.com/CVE-2012-1034/): Cross-site scripting in episerver:episerver cms (medium 4.3)
- [CVE-2012-1033](https://insights.sbomify.com/CVE-2012-1033/): Business logic in isc:bind (medium 5.0)
- [CVE-2012-1032](https://insights.sbomify.com/CVE-2012-1032/): Cross-site scripting in episerver:episerver (medium 4.3)
- [CVE-2012-1031](https://insights.sbomify.com/CVE-2012-1031/): Privilege escalation in episerver:episerver cms (medium 6.0)
- [CVE-2012-1030](https://insights.sbomify.com/CVE-2012-1030/): Cross-site scripting in dnnsoftware:dotnetnuke (medium 4.3)
- [CVE-2012-1029](https://insights.sbomify.com/CVE-2012-1029/): SQL injection in tubeace:tube ace (high 7.5)
- [CVE-2012-1028](https://insights.sbomify.com/CVE-2012-1028/): Cross-site scripting in simple-groupware:simplegroupware (medium 4.3)
- [CVE-2012-1027](https://insights.sbomify.com/CVE-2012-1027/): Cross-site scripting in project-open:\]project-open\[ (medium 4.3)
- [CVE-2012-1026](https://insights.sbomify.com/CVE-2012-1026/): SQL injection in johannes ekberg:xray cms (high 7.5)
- [CVE-2012-1025](https://insights.sbomify.com/CVE-2012-1025/): Path traversal in dream-multimedia-tv:enigma2 webinterface (medium 5.0)
- [CVE-2012-1024](https://insights.sbomify.com/CVE-2012-1024/): Path traversal in dream-multimedia-tv:enigma2 webinterface (medium 5.0)
- [CVE-2012-1023](https://insights.sbomify.com/CVE-2012-1023/): Open redirect in 4homepages:4images (medium 5.8)
- [CVE-2012-1022](https://insights.sbomify.com/CVE-2012-1022/): SQL injection in 4homepages:4images (high 7.5)
- [CVE-2012-1021](https://insights.sbomify.com/CVE-2012-1021/): Cross-site scripting in 4homepages:4images (medium 4.3)
- [CVE-2012-1020](https://insights.sbomify.com/CVE-2012-1020/): Cross-site scripting in overseaswtc:nexorone online banking system (medium 4.3)
- [CVE-2012-1019](https://insights.sbomify.com/CVE-2012-1019/): Cross-site scripting in xwiki:xwiki enterprise (medium 4.3)
- [CVE-2012-1018](https://insights.sbomify.com/CVE-2012-1018/): Cross-site scripting in dmackmedia:mod currencyconverter (medium 4.3)
- [CVE-2012-1017](https://insights.sbomify.com/CVE-2012-1017/): SQL injection in secureideas:base (high 7.5)
- [CVE-2012-1016](https://insights.sbomify.com/CVE-2012-1016/): Null dereference in mit:kerberos 5 (medium 5.0)
- [CVE-2012-1015](https://insights.sbomify.com/CVE-2012-1015/): Memory corruption in mit:kerberos 5 (critical 9.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2012/page/45/