CVE-2017-18535

The smokesignal plugin before 1.2.7 for WordPress has XSS...

CVE-2019-1010201

Jeesite 1.2.7 is affected by: SQL Injection. The impact is: sensitive information disclosure. The component is: updateProcInsIdByBusinessId function in src/main/java/com.thinkgem.jeesite/modules/act/ActDao.java has SQL Injection vulnerability. The attack vector is: network...

WordPress Fish House theme <= 1.2.7 - PHP Object Injection Vulnerability

PHP Object Injection Vulnerability discovered by Tran Nguyen Bao Khanh in WordPress Theme Fish House versions = 1.2.7...

CVE-2023-30421

mystrtod in mjson 1.2.7 requires more than a billion iterations during processing of certain digit strings such as 8891110122900e913013935755114...

CVE-2023-30421

The CVE-2023-30421 entry concerns mystrtod in the mjson library (version 1.2.7). Affected component: mjson’s mystrtod function; root cause: processing certain numeric strings requires an excessive number of iterations (example: 8891110122900e913013935755114). Reported impact is denial of service ...

PT-2025-17395 · Mjson · Mjson

Name of the Vulnerable Software and Affected Versions: mjson version 1.2.7 Description: The issue arises in the mystrtod function of mjson, which requires an excessive number of iterations when processing specific digit strings, such as 8891110122900e913013935755114. This can lead to potential...

CVE-2023-30421

mystrtod in mjson 1.2.7 requires more than a billion iterations during processing of certain digit strings such as 8891110122900e913013935755114...

mJson 安全漏洞

mJson is an extremely lightweight Java JSON library from the individual developer Borislav Iordanov. A security vulnerability exists in mJson version 1.2.7, which could lead to a denial of service when processing certain numeric strings...

CVE-2023-30421

mystrtod in mjson 1.2.7 requires more than a billion iterations during processing of certain digit strings such as 8891110122900e913013935755114...

Incorrect Synchronization

Overview Affected versions of this package are vulnerable to Incorrect Synchronization in the checkCertId function, when processing multiple concurrent updates to a node's configuration, which can cause a panic. Remediation Upgrade chainmaker.org/chainmaker/net-libp2p/libp2pnet to version 1.2.7 o...

CVE-2025-3150

A vulnerability was found in itning Student Homework Management System up to 1.2.7. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been...

PT-2025-14604 · Unknown · Itning Student Homework Management System

Name of the Vulnerable Software and Affected Versions: itning Student Homework Management System versions 1.2.7 and earlier Description: A problem was found in the itning Student Homework Management System. It affects an unknown function of the file /shw war/fileupload in the Edit Job Page...

Student-Homework-Management-System 代码注入漏洞

Student-Homework-Management-System is a student work management system developed by itning individual developers using SSM+Shiro. A code injection vulnerability exists in Student-Homework-Management-System 1.2.7 and earlier versions, which stems from a cross-site scripting attack due to incorrect...

Student-Homework-Management-System 安全漏洞

Student-Homework-Management-System is a student homework management system developed by itning individual developers using SSM+Shiro. A security vulnerability exists in Student-Homework-Management-System 1.2.7 and earlier versions, which is caused by cross-site request forgery...

CVE-2025-31612

Deserialization of Untrusted Data vulnerability in Sabuj Kundu CBX Poll cbxpoll allows Object Injection.This issue affects CBX Poll: from n/a through = 2.0.4...

WordPress plugin CBX Poll 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

PT-2025-14213 · Themeglow · Themeglow Jobboard Job Listing

Name of the Vulnerable Software and Affected Versions: themeglow JobBoard Job listing versions 1.2.7 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For...

TRENDnet TEW-637AP和TRENDnet TEW-638APB 安全漏洞

The TRENDnet TEW-637AP and TRENDnet TEW-638APB are both a wireless access point from Trendnet, Inc. A security vulnerability exists in TRENDnet TEW-637AP and TRENDnet TEW-638APB versions 1.2.7 and 1.3.0.106, which stems from a null pointer dereference issue in the HTTP request processing componen...

CVE-2025-30538

Cross-Site Request Forgery CSRF vulnerability in ChrisHurst Simple Optimizer simple-optimizer allows Cross Site Request Forgery.This issue affects Simple Optimizer: from n/a through = 1.2.7...

CVE-2025-30538

CVE-2025-30538 describes a CSRF vulnerability in the WordPress plugin Simple Optimizer (affecting up to version 1.2.7). The Initial Document notes a Cross-Site Request Forgery issue with Simple Optimizer and lists affected scope “from n/a through 1.2.7.” The Connected Documents add a Wordfence vu...