# Vulnerabilities published in 2012


- [CVE-2012-5504](https://insights.sbomify.com/CVE-2012-5504/): Plone Cross-site scripting Vulnerability (medium 4.3)
- [CVE-2012-5503](https://insights.sbomify.com/CVE-2012-5503/): Plone allows remote attackers to read hidden folder contents (medium 5.0)
- [CVE-2012-5502](https://insights.sbomify.com/CVE-2012-5502/): Plone Cross-site scripting Vulnerability (low 3.5)
- [CVE-2012-5501](https://insights.sbomify.com/CVE-2012-5501/): Plone Arbitrary File Read (medium 5.0)
- [CVE-2012-5500](https://insights.sbomify.com/CVE-2012-5500/): Plone contains Cross-site Request Forgery (medium 4.3)
- [CVE-2012-5499](https://insights.sbomify.com/CVE-2012-5499/): Plone is vulnerable to denial of service (medium 5.0)
- [CVE-2012-5498](https://insights.sbomify.com/CVE-2012-5498/): Plone denial of service via Caching Bypass (medium 5.0)
- [CVE-2012-5497](https://insights.sbomify.com/CVE-2012-5497/): Plone User account enumeration via crafted URL (medium 5.0)
- [CVE-2012-5496](https://insights.sbomify.com/CVE-2012-5496/): Plone DoS via Crafted URL (medium 5.0)
- [CVE-2012-5495](https://insights.sbomify.com/CVE-2012-5495/): Plone python code injection (medium 5.0)
- [CVE-2012-5494](https://insights.sbomify.com/CVE-2012-5494/): Plone Cross-site scripting Vulnerability (medium 4.3)
- [CVE-2012-5493](https://insights.sbomify.com/CVE-2012-5493/): Plone Sandbox Bypass (high 8.5)
- [CVE-2012-5492](https://insights.sbomify.com/CVE-2012-5492/): Plone Metadata Disclosure (medium 5.0)
- [CVE-2012-5491](https://insights.sbomify.com/CVE-2012-5491/): Plone Information Disclosure (medium 4.3)
- [CVE-2012-5490](https://insights.sbomify.com/CVE-2012-5490/): Plone Cross-site scripting Vulnerability (medium 4.3)
- [CVE-2012-5489](https://insights.sbomify.com/CVE-2012-5489/): Plone and Zope2 vulnerable to unauthorized access to restricted attributes (medium 6.5)
- [CVE-2012-5488](https://insights.sbomify.com/CVE-2012-5488/): Plone Code Injection vulnerability (medium 5.0)
- [CVE-2012-5487](https://insights.sbomify.com/CVE-2012-5487/): Plone Sandbox Bypass (high 8.5)
- [CVE-2012-5486](https://insights.sbomify.com/CVE-2012-5486/): HTTP header injection in Plone and Zope2 (medium 6.4)
- [CVE-2012-5485](https://insights.sbomify.com/CVE-2012-5485/): Plone Code Injection vulnerability (medium 6.8)
- [CVE-2012-5484](https://insights.sbomify.com/CVE-2012-5484/): Security feature bypass in n/a (high 7.9)
- [CVE-2012-5483](https://insights.sbomify.com/CVE-2012-5483/): Information disclosure in n/a (low 2.1)
- [CVE-2012-5482](https://insights.sbomify.com/CVE-2012-5482/): OpenStack Glance arbitrary deletion of non-protected images (medium 5.5)
- [CVE-2012-5481](https://insights.sbomify.com/CVE-2012-5481/): Missing authorization in n/a (medium 4.0)
- [CVE-2012-5480](https://insights.sbomify.com/CVE-2012-5480/): Missing authorization in n/a (medium 6.4)
- [CVE-2012-5479](https://insights.sbomify.com/CVE-2012-5479/): File upload in n/a (medium 6.5)
- [CVE-2012-5478](https://insights.sbomify.com/CVE-2012-5478/): Missing authorization in n/a (medium 4.9)
- [CVE-2012-5477](https://insights.sbomify.com/CVE-2012-5477/): Misconfiguration in n/a (low 3.6)
- [CVE-2012-5476](https://insights.sbomify.com/CVE-2012-5476/): Information disclosure in openstack-dashboard (medium 5.5)
- [CVE-2012-5474](https://insights.sbomify.com/CVE-2012-5474/): Information disclosure in python-django-horizon (medium 5.5)
- [CVE-2012-5473](https://insights.sbomify.com/CVE-2012-5473/): Information disclosure in n/a (medium 4.0)
- [CVE-2012-5472](https://insights.sbomify.com/CVE-2012-5472/): Missing authorization in n/a (medium 4.0)
- [CVE-2012-5471](https://insights.sbomify.com/CVE-2012-5471/): Moodle Allows Unauthenticated Dropbox Access (medium 6.5)
- [CVE-2012-5470](https://insights.sbomify.com/CVE-2012-5470/): Denial of service in n/a (medium 4.3)
- [CVE-2012-5469](https://insights.sbomify.com/CVE-2012-5469/): Auth bypass in n/a (high 7.5)
- [CVE-2012-5468](https://insights.sbomify.com/CVE-2012-5468/): Memory corruption in n/a (high 7.5)
- [CVE-2012-5460](https://insights.sbomify.com/CVE-2012-5460/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-5459](https://insights.sbomify.com/CVE-2012-5459/): Privilege escalation in n/a (high 7.9)
- [CVE-2012-5458](https://insights.sbomify.com/CVE-2012-5458/): Privilege escalation in n/a (high 8.3)
- [CVE-2012-5456](https://insights.sbomify.com/CVE-2012-5456/): Weak cryptography in n/a (medium 4.3)
- [CVE-2012-5455](https://insights.sbomify.com/CVE-2012-5455/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-5454](https://insights.sbomify.com/CVE-2012-5454/): Missing authorization in n/a (medium 6.5)
- [CVE-2012-5453](https://insights.sbomify.com/CVE-2012-5453/): SQL injection in n/a (medium 6.5)
- [CVE-2012-5452](https://insights.sbomify.com/CVE-2012-5452/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-5451](https://insights.sbomify.com/CVE-2012-5451/): Memory corruption in n/a (medium 5.0)
- [CVE-2012-5450](https://insights.sbomify.com/CVE-2012-5450/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2012-5445](https://insights.sbomify.com/CVE-2012-5445/): Memory corruption in n/a (medium 6.8)
- [CVE-2012-5444](https://insights.sbomify.com/CVE-2012-5444/): Missing authorization in n/a (medium 5.0)
- [CVE-2012-5429](https://insights.sbomify.com/CVE-2012-5429/): Denial of service in n/a (medium 4.6)
- [CVE-2012-5427](https://insights.sbomify.com/CVE-2012-5427/): Denial of service in n/a (medium 4.0)
- [CVE-2012-5424](https://insights.sbomify.com/CVE-2012-5424/): Auth bypass in n/a (medium 5.0)
- [CVE-2012-5422](https://insights.sbomify.com/CVE-2012-5422/): Denial of service in n/a (medium 6.8)
- [CVE-2012-5419](https://insights.sbomify.com/CVE-2012-5419/): Denial of service in n/a (high 7.8)
- [CVE-2012-5417](https://insights.sbomify.com/CVE-2012-5417/): Missing authorization in n/a (critical 10.0)
- [CVE-2012-5416](https://insights.sbomify.com/CVE-2012-5416/): Memory corruption in n/a (high 7.8)
- [CVE-2012-5415](https://insights.sbomify.com/CVE-2012-5415/): Race condition in n/a (medium 5.4)
- [CVE-2012-5409](https://insights.sbomify.com/CVE-2012-5409/): Memory corruption in n/a (critical 10.0)
- [CVE-2012-5395](https://insights.sbomify.com/CVE-2012-5395/): Auth bypass in n/a (medium 6.8)
- [CVE-2012-5394](https://insights.sbomify.com/CVE-2012-5394/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2012-5391](https://insights.sbomify.com/CVE-2012-5391/): Auth bypass in n/a (medium 6.8)
- [CVE-2012-5390](https://insights.sbomify.com/CVE-2012-5390/): Privilege escalation in n/a (critical 10.0)
- [CVE-2012-5389](https://insights.sbomify.com/CVE-2012-5389/): Null dereference in n/a (high 7.5)
- [CVE-2012-5388](https://insights.sbomify.com/CVE-2012-5388/): Cross-site scripting in n/a (low 3.5)
- [CVE-2012-5387](https://insights.sbomify.com/CVE-2012-5387/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2012-5386](https://insights.sbomify.com/CVE-2012-5386/): Path traversal in n/a (medium 6.8)
- [CVE-2012-5385](https://insights.sbomify.com/CVE-2012-5385/): Missing authorization in n/a (high 7.5)
- [CVE-2012-5384](https://insights.sbomify.com/CVE-2012-5384/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2012-5383](https://insights.sbomify.com/CVE-2012-5383/): Privilege escalation in n/a (medium 6.2)
- [CVE-2012-5382](https://insights.sbomify.com/CVE-2012-5382/): Privilege escalation in n/a (medium 6.0)
- [CVE-2012-5381](https://insights.sbomify.com/CVE-2012-5381/): Privilege escalation in n/a (medium 6.0)
- [CVE-2012-5380](https://insights.sbomify.com/CVE-2012-5380/): Path traversal in n/a (medium 6.7)
- [CVE-2012-5379](https://insights.sbomify.com/CVE-2012-5379/): Privilege escalation in n/a (high 7.3)
- [CVE-2012-5378](https://insights.sbomify.com/CVE-2012-5378/): Privilege escalation in n/a (medium 6.0)
- [CVE-2012-5377](https://insights.sbomify.com/CVE-2012-5377/): Privilege escalation in n/a (medium 6.0)
- [CVE-2012-5376](https://insights.sbomify.com/CVE-2012-5376/): Path traversal in n/a (critical 9.6)
- [CVE-2012-5375](https://insights.sbomify.com/CVE-2012-5375/): Denial of service in n/a (medium 4.0)
- [CVE-2012-5374](https://insights.sbomify.com/CVE-2012-5374/): Denial of service in n/a (medium 4.0)
- [CVE-2012-5373](https://insights.sbomify.com/CVE-2012-5373/): Denial of service in n/a (medium 5.0)
- [CVE-2012-5372](https://insights.sbomify.com/CVE-2012-5372/): Denial of service in n/a (medium 5.0)
- [CVE-2012-5371](https://insights.sbomify.com/CVE-2012-5371/): Denial of service in n/a (medium 5.0)
- [CVE-2012-5370](https://insights.sbomify.com/CVE-2012-5370/): JRuby denial of service via Hash Collision (medium 5.0)
- [CVE-2012-5368](https://insights.sbomify.com/CVE-2012-5368/): phpMyAdmin Unsafe Fetching of Javascript Code (medium 4.3)
- [CVE-2012-5367](https://insights.sbomify.com/CVE-2012-5367/): SQL injection in n/a (medium 6.0)
- [CVE-2012-5366](https://insights.sbomify.com/CVE-2012-5366/): Denial of service in n/a (high 7.5)
- [CVE-2012-5365](https://insights.sbomify.com/CVE-2012-5365/): Denial of service in n/a (high 7.5)
- [CVE-2012-5364](https://insights.sbomify.com/CVE-2012-5364/): Denial of service in n/a (high 7.5)
- [CVE-2012-5363](https://insights.sbomify.com/CVE-2012-5363/): Denial of service in n/a (high 7.5)
- [CVE-2012-5362](https://insights.sbomify.com/CVE-2012-5362/): Denial of service in n/a (high 7.5)
- [CVE-2012-5361](https://insights.sbomify.com/CVE-2012-5361/): Memory corruption in n/a (high 7.8)
- [CVE-2012-5360](https://insights.sbomify.com/CVE-2012-5360/): Memory corruption in n/a (high 8.8)
- [CVE-2012-5359](https://insights.sbomify.com/CVE-2012-5359/): Memory corruption in n/a (high 8.8)
- [CVE-2012-5358](https://insights.sbomify.com/CVE-2012-5358/): XML external entity in n/a (critical 9.8)
- [CVE-2012-5357](https://insights.sbomify.com/CVE-2012-5357/): Code injection in n/a (critical 9.8)
- [CVE-2012-5356](https://insights.sbomify.com/CVE-2012-5356/): Security feature bypass in n/a (medium 5.8)
- [CVE-2012-5355](https://insights.sbomify.com/CVE-2012-5355/): Path traversal in n/a (low 3.3)
- [CVE-2012-5354](https://insights.sbomify.com/CVE-2012-5354/): Other in n/a (medium 6.8)
- [CVE-2012-5353](https://insights.sbomify.com/CVE-2012-5353/): Auth bypass in n/a (medium 5.8)
- [CVE-2012-5352](https://insights.sbomify.com/CVE-2012-5352/): Auth bypass in n/a (medium 5.8)
- [CVE-2012-5351](https://insights.sbomify.com/CVE-2012-5351/): Improper Authentication in Apache Axis2 (medium 6.4)
- [CVE-2012-5350](https://insights.sbomify.com/CVE-2012-5350/): SQL injection in n/a (medium 6.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2012/page/9/