159 matches found
ROOT-OS-DEBIAN-12-CVE-2022-1210 CVE-2022-1210 in rootio-tiff - Patched by Root
Root has patched CVE-2022-1210 in the rootio-tiff package for Root:Debian:12. Multiple fixed versions available...
CVE-2026-1210
The CVE-2026-1210 entry describes a Stored Cross-Site Scripting vulnerability in the Happy Addons for Elementor WordPress plugin, affecting all versions up to 3.20.7. The root cause is insufficient input sanitization and output escaping in the '_elementor_data' meta field. Exploitation requires a...
MiracleLinux 3 : wireshark-1.0.8-1.1.1AXS3 (AXSA:2009-70:02)
The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2009-70:02 advisory. Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library,...
EUVD-2026-1210
Improper Check for Unusual or Exceptional Conditions vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K...
EUVD-2006-0679
Malware in sbrugna...
Security update for jbigkit
This update for jbigkit fixes the following issues: CVE-2022-1210: Malicious file leads to a denial of service in TIFF File Handler bsc1198146. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you...
SUSE-SU-2025:20663-1 Security update for jbigkit
This update for jbigkit fixes the following issues: - CVE-2022-1210: Malicious file leads to a denial of service in TIFF File Handler bsc1198146...
CVE-2024-1210
The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via API. This makes it possible for unauthenticated attackers to obtain access to quizzes...
CVE-2013-1210
Array index error in the Virtual Ethernet Module VEM kernel driver for VMware ESXi in Cisco NX-OS on the Nexus 1000V, when STUN debugging is enabled, allows remote attackers to cause a denial of service ESXi crash and purple screen of death by sending crafted STUN packets to a VEM, aka Bug ID...
Linux Distros Unpatched Vulnerability : CVE-2010-1210
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - intl/uconv/util/nsUnicodeDecodeHelper.cpp in Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 inserts a U+FFFD sequence into text in certain...
CVE-2025-1210
creationtimestamp| type| source ---|---|--- 2025-02-12 17:06:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113992006636006896 2025-02-12 17:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyofyh2ac2z 2025-02-12 20:14:15+00:00| seen|...
CVE-2025-1210 code-projects Wazifa System control.php sql injection
A vulnerability classified as critical was found in code-projects Wazifa System 1.0. Affected by this vulnerability is an unknown functionality of the file /controllers/control.php. The manipulation of the argument to leads to sql injection. The attack can be launched remotely. The exploit has be...
Oracle Linux 9 : tbb (ELSA-2025-1210)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-1210 advisory. 2020.3-8.1 - Remove jQuery from Doxygen output RHEL-77693 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...
AlmaLinux 9 : tbb (ALSA-2025:1210)
The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:1210 advisory. jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Tenable has extracted the preceding description block directly...
RHSA-2024:1210
creationtimestamp| type| source ---|---|--- 2024-03-13 17:16:31+00:00| seen| https://t.me/ctinow/206921...
CVE-2024-1210
creationtimestamp| type| source ---|---|--- 2024-02-14 21:16:33+00:00| seen| https://t.me/ctinow/185017 2024-02-21 21:20:53+00:00| seen| https://t.me/arpsyndicate/3868 2024-02-23 22:03:27+00:00| published-proof-of-concept| https://t.me/codeb0ss/1380 2024-02-25 14:46:19+00:00| seen|...
CVE-2024-1210 LearnDash LMS <= 4.10.1 - Sensitive Information Exposure via API
The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via API. This makes it possible for unauthenticated attackers to obtain access to quizzes...
CVE-2024-1210
CVE-2024-1210 concerns the LearnDash LMS WordPress plugin. The connected documents specify a Sensitive Information Exposure vulnerability in LearnDash where, in all versions up to and including 4.10.1 (via API), unauthenticated attackers can obtain access to quizzes. The vulnerability affects the...
WordPress LearnDash LMS Plugin <= 4.10.1 is vulnerable to Sensitive Data Exposure
Software LearnDash LMS Type Plugin Vulnerable versions = 4.10.1 Fixed in 4.10.2 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-1210 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID eac39e71b914 Credits Karl Emil Nikka Required...
SUSE-SU-2023:4969-1 Security update for jbigkit
This update for jbigkit fixes the following issues: - CVE-2022-1210: Fixed denial of service in TIFF File Handler bsc1198146...