CVE-2018-10612

creationtimestamp| type| source ---|---|--- 2026-03-17 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01...

CVE-2019-10612

creationtimestamp| type| source ---|---|--- 2026-01-20 08:04:52+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...

CVE-2020-10612

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPACAgent communicates with SoftPACMonitor over network Port 22000. However, this port is open without any restrictions. This allows an attacker with network access to control the SoftPACAgent service including updating SoftPAC firmware, starting ...

CVE-2025-10612

creationtimestamp| type| source ---|---|--- 2025-10-21 13:03:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3pfedn4hr2i...

CVE-2025-10612 XSS in GiSoft's City Guide

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in giSoft Information Technologies City Guide allows Reflected XSS. This issue affects City Guide: before 1.4.45...

CVE-2025-10612

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in giSoft Information Technologies City Guide allows Reflected XSS. This issue affects City Guide: before 1.4.45...

CVE-2019-10612

UTCB object has a function pointer called by the reaper to deallocate its memory resources and this address can potentially be corrupted by stack overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure...

CVE-2024-10612

creationtimestamp| type| source ---|---|--- 2024-11-01 04:38:51+00:00| seen| https://t.me/cvedetector/9558...

MSC-2022-10612

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

CVE-2019-10612

CVE-2019-10612 describes a stack overflow vulnerability in UTCB object handling that can corrupt a function pointer used by the reaper to deallocate memory, potentially enabling memory corruption in Qualcomm/Snapdragon components (e.g., Snapdragon Auto, Compute, and various IoT platforms). Affect...

CVE-2018-10612

In 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0, user access management and communication encryption is not enabled by default, which could allow an attacker access to the device and sensitive information, including user credentials...

CVE-2018-10612

CVE-2018-10612 affects 3S-Smart Software Solutions GmbH CODESYS Control V3 products containing CmpSecureChannel or CmpUserMgr prior to version 3.5.14.0. Root cause: user access management and online communication encryption are not enabled by default, creating Improper Access Control and allowing...

3S-Smart Software Solutions GmbH CODESYS Control V3 Products

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low skill level to exploit Vendor : 3S-Smart Software Solutions GmbH Equipment : CODESYS Control V3 products Vulnerability : Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability could allow...

CVE-2016-10612

dalek-browser-ie-canary is Internet Explorer bindings for DalekJS. dalek-browser-ie-canary downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binar...

CVE-2016-10612

dalek-browser-ie-canary downloads binary resources over HTTP, enabling MitM and potential remote code execution if an attacker on the network intercepts and replaces the binary. Affected: dalek-browser-ie-canary (Internet Explorer bindings for DalekJS). Root cause: unencrypted HTTP delivery of ex...

CVE-2016-10612

dalek-browser-ie-canary is Internet Explorer bindings for DalekJS. dalek-browser-ie-canary downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binar...

Juniper Junos Space < 17.1R1 Multiple Vulnerabilities (JSA10826)

According to its self-reported version number, the version of Junos Space running on the remote device is 17.1R1, and is therefore affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104100; scriptversion"1.7";...

CVE-2017-10612 Junos Space: Persistent Cross site scripting in Junos Space

A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configuration to implant malicious Javascript or HTML which may be used to steal information or perform actions as other Junos Space users or administrators. Affected releases are Juniper...

CVE-2017-10612

CVE-2017-10612 is a persistent cross-site scripting vulnerability in Juniper Networks Junos Space. The issue allows an attacker who can modify certain configuration data to inject malicious Javascript/HTML, potentially stealing information or acting as other Junos Space users or administrators. A...

parsijoo.ir XSS vulnerability

Vulnerable URL: http://parsijoo.ir/web?q=0x524D%22%3E%3Cscript%20src=%22https://openbugbounty.org/1.js%22%3E%3C/script%3E=all=any= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10612 VIP website status:| Yes...