21 matches found
CVE-2026-12041
The Chatra Live Chat + ChatBot + Cart Saver plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2026-12041
creationtimestamp| type| source ---|---|--- 2026-07-08 05:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq4ehfuu5k2r 2026-07-08 08:01:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq4npvpahf2e...
CVE-2020-12041
The Baxter Spectrum WBM v17, v20D29, v20D30, v20D31, and v22D24 telnet Command-Line Interface, grants access to sensitive data stored on the WBM that permits temporary configuration changes to network settings of the WBM, and allows the WBM to be rebooted. Temporary configuration changes to netwo...
CVE-2019-12041
lib/common/htmlre.js in remarkable 1.7.1 allows Regular Expression Denial of Service ReDoS via a CDATA section...
CVE-2025-12041
creationtimestamp| type| source ---|---|--- 2025-10-31 10:50:07+00:00| seen| https://gist.github.com/Darkcrai86/1e15dddc97d7c051d436f6ee04a74600...
WordPress ERI File Library plugin <= 1.1.0 - Missing Authorization to Unauthenticated Protected File Download vulnerability
Missing Authorization to Unauthenticated Protected File Download vulnerability discovered by Athiwat Tiprasaharn Jitlada in WordPress Plugin ERI File Library versions = 1.1.0...
CVE-2024-12041
The Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.0.12 via the /wp-json/directorist/v1/users/ endpoint. This makes it possible for unauthenticated attacker...
CVE-2024-12041 Directorist – AI-Powered WordPress Business Directory Plugin with Classified Ads Listings <= 8.0.12 - Unauthenticated User Information Exposure
The Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.0.12 via the /wp-json/directorist/v1/users/ endpoint. This makes it possible for unauthenticated attacker...
CVE-2024-12041 Directorist – AI-Powered WordPress Business Directory Plugin with Classified Ads Listings <= 8.0.12 - Unauthenticated User Information Exposure
The Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.0.12 via the /wp-json/directorist/v1/users/ endpoint. This makes it possible for unauthenticated attacker...
CVE-2024-12041
CVE-2024-12041 affects the Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings for WordPress, vulnerable in all versions up to and including 8.0.12. The root cause is information exposure via unauthenticated access to /wp-json/directorist/v1/users/, allowing e...
CVE-2020-12041
creationtimestamp| type| source ---|---|--- 2022-03-03 17:30:00+00:00| seen| https://t.me/truesecator/2696 2026-06-27 16:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpbvezal5224...
CVE-2020-27001
A vulnerability has been identified in JT2Go All versions V13.1.0.2, Teamcenter Visualization All versions V13.1.0.2. Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a stack based buffer overflow. An attacker could leverage this...
CVE-2020-27001
CVE-2020-27001 affects Siemens JT2Go < 13.1.0.2 and Teamcenter Visualization
CVE-2020-12041
The Baxter Spectrum Wireless Battery Module (WBM) telnet CLI vulnerability CVE-2020-12041 affects Baxter Spectrum WBM components (v17, v20D29–D32, v22D24). The Telnet interface grants access to sensitive data and permits temporary changes to network settings, including rebooting the WBM, with cha...
CVE-2020-12041
The Baxter Spectrum WBM v17, v20D29, v20D30, v20D31, and v22D24 telnet Command-Line Interface, grants access to sensitive data stored on the WBM that permits temporary configuration changes to network settings of the WBM, and allows the WBM to be rebooted. Temporary configuration changes to netwo...
@abdelilah/react-rich-text (=0.0.1), @bemit/flood-admin (>=0.1.2 <=0.1.6) +36 more potentially affected by CVE-2019-12041 via remarkable (>=1.3.0 <=1.7.1)
remarkable NPM version =1.3.0, =0.1.2, =0.1.0, =0.1.0, =4.0.0, =5.17.1, =1.1.2, =0.0.23, =0.0.23, =0.1.0, =2.0.0-beta0, =0.1.9, =0.2.1 - docpack =1.0.0-alpha and more Source cves: CVE-2019-12041 Source advisory: OSV:GHSA-Q22G-8FR4-QPJ4...
CVE-2019-12041
Affected software: remarkable 1.7.1, with vulnerable code in lib/common/html_re.js. The CVE describes a Regular Expression Denial of Service (ReDoS) via a CDATA section in that file. The vulnerability could allow an attacker to craft input inside the CDATA tag that drives the regex engine to high...
Microsoft Windows Device Guard Security Bypass Vulnerability (CNVD-2018-12041)
Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Microsoft Windows 10 is a suite of operating systems for personal computers.Windows Server 2016 is a suite of server operating systems.Device Guard is one of the device Device Guard is...
CVE-2018-12041
An issue was discovered on the MediaTek AWUS036NH wireless USB adapter through 5.1.25.0. Attackers can remotely deny service by sending specially constructed 802.11 frames...
CVE-2018-12041
The CVE-2018-12041 entry concerns the MediaTek AWUS036NH wireless USB adapter. Affected software: AWUS036NH firmware up to version 5.1.25.0. Vulnerability: remote denial of service via specially crafted 802.11 frames. Root cause details are not elaborated in the provided documents. Impact is part...