24 matches found
ROOT-APP-NPM-CVE-2026-12143 CVE-2026-12143 in @rootio/form-data - Patched by Root
Root has patched CVE-2026-12143 in the @rootio/form-data package for Root:npm. Multiple fixed versions available...
Important: Red Hat Security Advisory: Red Hat Data Grid 8.6.2 security update
An update for Red Hat Data Grid 8 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...
Security Bulletin: IBM Transformation Advisor is affected by multiple vulnerabilities found in JavaScript
Summary There are multiple vulnerabilities in JavaScript used by IBM Transformation Advisor. Vulnerability Details CVEID:CVE-2026-12143 DESCRIPTION: form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the field argument to FormDataappend and the...
CVE-2026-12143 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, sqlpad, lerna, argo-workflows, py3-captum, redisinsight, opensearch-dashboards-fips, opensearch-dashboards, nextcloud-server, saf, pelias-api, gitlab-rails-ce, jitsucom-jitsu, prism, drupal, unleash, kubeflow-centraldashboard, wazuh-dashboard, arangod...
-react-file-list-components (=1.1.1), 01basicreact (>=0.1.0 <=0.1.9) +45932 more potentially affected by CVE-2026-12143 via form-data (>=3.0.0 <=3.0.4)
form-data NPM version =3.0.0, =0.1.0, =0.1.0, =0.1.6 - 0beny1s =1.1.6 - 0scarclassa =1.0.1 - 0scarclassb =1.0.1 - 0scarclassc =1.0.1 - 0scarclassd =1.0.1 - 0scarclasse =1.0.1 - 0scarclassf =1.0.1 - 0scarclassg =1.0.1 - 0scarclassh =1.0.1 - 0scarclassi =1.0.1 - 0scarclassj =1.0.1 - 0scarclassk...
com.alilitech:boot-plus-log (>=2.1.0 <=2.1.5), com.github.linyuzai:concept-plugin-spring-boot-starter (>=2.0.0 <=3.0.0) +38 more potentially affected by CVE-2026-12143 via org.webjars.npm:form-data (>=4.0.4 <=4.0.5)
org.webjars.npm:form-data MAVEN version =4.0.4, =2.1.0, =2.0.0, =1.0.3, =1.0.0, =2.1.1, =1.0.0, =1.0.0, =2.1.3, =2.0.0, =1.0.2, =4.22.2, =4.22.2, =9.21.0, =0.27.2, =1.17.0 and more Source cves: CVE-2026-12143 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-17337016...
-react-file-list-components (=1.1.1), 01basicreact (>=0.1.0 <=0.1.9) +45932 more potentially affected by CVE-2026-12143 via form-data (>=3.0.0 <=3.0.4)
form-data NPM version =3.0.0, =0.1.0, =0.1.0, =0.1.6 - 0beny1s =1.1.6 - 0scarclassa =1.0.1 - 0scarclassb =1.0.1 - 0scarclassc =1.0.1 - 0scarclassd =1.0.1 - 0scarclasse =1.0.1 - 0scarclassf =1.0.1 - 0scarclassg =1.0.1 - 0scarclassh =1.0.1 - 0scarclassi =1.0.1 - 0scarclassj =1.0.1 - 0scarclassk...
CVE-2026-12143
creationtimestamp| type| source ---|---|--- 2026-06-12 18:00:49+00:00| published-proof-of-concept| https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx 2026-06-12 21:57:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4qbo7oof23 2026-06-16 12:01:29+00:0...
Multiple vulnerabilities in ABB Terra AC Wallbox
Overview Terra AC Wallbox provided by ABB contains the following vulnerability. Heap-based buffer overflow CWE-122 - CVE-2025-10504 Classic buffer overflow CWE-120 - CVE-2025-12142 Stack-based buffer overflow CWE-121 - CVE-2025-12143 Ryo Kato of Panasonic reported this vulnerability to IPA...
CVE-2024-12143
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mobilteg Mobile Informatics Mikro Hand Terminal - MikroDB allows SQL Injection. This issue affects Mikro Hand Terminal - MikroDB. NOTE: The vendor did not inform about the completion of the fixing...
CVE-2024-12143
CVE-2024-12143 describes an SQL Injection in Mobilteg Mobile Informatics Mikro Hand Terminal - MikroDB caused by improper neutralization of special elements in SQL commands. Affected product: Mikro Hand Terminal - MikroDB (Mobilteg Mobile Informatics). The CVSS 3.1 vector in the entry indicates N...
CVE-2020-12143
The certificate used to identify Orchestrator to EdgeConnect devices is not validated, which makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted Orchestrator...
Oracle Linux 6 : sudo (ELSA-2023-12143)
The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-12143 advisory. 1.8.6p3-29.0.4.el610.3 - Fixed Privilege escalation CVE-2023-22809 for sudoedit Orabug: 35037922 Tenable has extracted the preceding description block directly...
CVE-2018-12143
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues. Notes: none...
CVE-2020-12143
The CVE-2020-12143 issue arises from failure to validate the certificate used to identify Orchestrator to EdgeConnect devices, allowing an attacker to establish a TLS connection from EdgeConnect to an untrusted Orchestrator. Affected product context centers on EdgeConnect/Orchestrator interaction...
CVE-2019-12143
A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WSFTP Server 2018 before 8.6.1. An attacker can supply a string using special patterns via the SCP protocol to disclose WSFTP usernames as well as filenames...
CVE-2019-12143
A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WSFTP Server 2018 before 8.6.1. An attacker can supply a string using special patterns via the SCP protocol to disclose WSFTP usernames as well as filenames...
CVE-2019-12143
CVE-2019-12143 affects Progress IPswitch WS_FTP Server (Windows) prior to 8.6.1. The vulnerability is a directory traversal in SSHServerAPI.dll that an attacker can trigger via SCP protocol by supplying specially crafted strings to disclose WS_FTP usernames and filenames. The issue impacts the SC...