This commit adds comments referencing multiple CVEs both in production and test code.
CVEs covered in this commit:CVE-2010-5137
CVE-2010-5139
CVE-2010-5141
CVE-2012-1909
CVE-2012-2459
CVE-2012-3789
CVE-2018-17144
Backport of Core PR14696 - part 1 of 2
Commit https://github.com/bitcoin/bitcoin/pull/14696/commits/38bfca6bb2ad68719415e9c54a981441052da072