88 matches found
EUVD-2026-0712
A weakness has been identified in UTT 进取 512W 1.7.7-171114. Affected is the function strcpy of the file /goform/formRemoteControl. This manipulation of the argument Profile causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the public an...
Photon OS 5.0: Iptraf PHSA-2025-5.0-0712
An update of the iptraf package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0712. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Linux Distros Unpatched Vulnerability : CVE-2022-0712
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.4. CVE-2022-0712 Note that Nessus relies on the presence of the package as reported...
CVE-2025-0712 APM Server Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when using the Windows Installer
An uncontrolled search path element vulnerability can lead to local privilege Escalation LPE via Insecure Directory Permissions. The vulnerability arises from improper handling of directory permissions. An attacker with local access may exploit this flaw to move and delete arbitrary files,...
CVE-2025-0712 APM Server Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when using the Windows Installer
An uncontrolled search path element vulnerability can lead to local privilege Escalation LPE via Insecure Directory Permissions. The vulnerability arises from improper handling of directory permissions. An attacker with local access may exploit this flaw to move and delete arbitrary files,...
CVE-2020-0712
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-0711, CVE-2020-0713, CVE-2020-0767...
CVE-2005-0712
Mac OS X before 10.3.8 users world-writable permissions for certain directories, which may allow local users to gain privileges, possibly via the receipt cache or ColorSync profiles...
Qnap QTS Command Injection (CVE-2018-0712)
Command injection vulnerability in LDAP Server in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20180402, QTS 4.3.4 build 20180413 and their earlier versions could allow remote attackers to run arbitrary commands or install malware on the NAS. This plugin only works with Tenable.ot. Please visit...
Photon OS 3.0: Libssh PHSA-2024-3.0-0712
An update of the libssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-3.0-0712. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2019-0712
creationtimestamp| type| source ---|---|--- 2024-02-11 14:07:17+00:00| seen| https://t.me/ctinow/182788...
CVE-2024-0712
creationtimestamp| type| source ---|---|--- 2024-01-25 23:16:16+00:00| seen| https://t.me/ctinow/173851 2024-02-15 07:41:29+00:00| seen| https://t.me/ctinow/185292...
CVE-2024-0712
The CVE-2024-0712 entry concerns Byzoro/Beijing Baichuo Smart S150 Management Platform (V31R02B15). Affected is an unknown function in the file /useratte/inc/userattea.php, leading to improper access controls. The vulnerability is exploitable remotely, and public exploits have been disclosed. Mul...
CVE-2024-0712 Byzoro Smart S150 Management Platform userattea.php access control
A vulnerability was found in Byzoro Smart S150 Management Platform V31R02B15. It has been classified as critical. Affected is an unknown function of the file /useratte/inc/userattea.php. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit...
Important Photon OS Security Update - PHSA-2024-3.0-0712
Updates of 'libssh', 'sqlite' packages of Photon OS have been released...
Debian: Security Advisory (DSA-2310-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-0712
creationtimestamp| type| source ---|---|--- 2023-02-08 02:23:26+00:00| seen| https://t.me/cibsecurity/57724...
CVE-2023-0712
The CVE-2023-0712 entry concerns the Wicked Folders WordPress plugin. A missing capability check in the ajax_move_object function allows authenticated users with subscriber-level permissions and above to bypass authorization and perform administrator-level actions (e.g., modifying the plugin’s fo...
Security Bulletin: Denial of Service Security Vulnerability in DB2’s XML Feature. (CVE-2012-0712)
Abstract Vulnerability in IBM DB2’s XML Feature could allow a remote attacker to cause the database server to crash. Content VULNERABILITY DETAILS CVE ID: CVE-2012-0712 DESCRIPTION: The IBM DB2 products listed below contain a security vulnerability in DB2’s XML Feature which could allow a malicio...
org.apache.portals.jetspeed-2:app-servers (>=2.1.3 <=2.1.4), org.apache.portals.jetspeed-2:jetspeed-archetype (>=2.2.1 <=2.3.0) +1 more potentially affected by CVE-2016-0712 via org.apache.portals.jetspeed-2:jetspeed (>=2.1.3 <=2.3.0)
org.apache.portals.jetspeed-2:jetspeed MAVEN version =2.1.3, =2.1.3, =2.2.1, =2.2.2, =2.3.0 Source cves: CVE-2016-0712 Source advisory: OSV:GHSA-HJ2V-85PH-8G48...
openSUSE 15 Security Update : flatpak (openSUSE-SU-2022:0712-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0712-1 advisory. - Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.12.3 and 1.10.6, Flatpak doesn't properly...