14 matches found
CVE-2026-12144
creationtimestamp| type| source ---|---|--- 2026-07-29 03:06:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqwzlx4dh2a 2026-07-29 03:10:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqxacujlm2g 2026-07-29 07:00:17+00:00| seen|...
CVE-2026-12144
The Wholesale for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.0.5. This is due to the saverequestsmeta function applying only sanitizetextfield to the userroleset POST parameter before passing it directly to WPUser::addrole, with ...
CVE-2026-12144
CVE-2026-12144 affects the Wholesale for WooCommerce plugin for WordPress (all versions up to and including 2.0.5). The root cause is in save_requests_meta(): the user_role_set POST parameter is sanitized only with sanitize_text_field(), then passed directly to WP_User::add_role() without an allo...
EUVD-2018-12144
Malware in sbrugna...
CVE-2024-12144
creationtimestamp| type| source ---|---|--- 2025-03-06 15:10:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6673 2025-03-06 15:48:53+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114116272593188604 2025-03-06 17:11:04+00:00| seen| https://t.me/cvedetector/19711 2025-03-...
CVE-2024-12144
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Finder Fire Safety Finder ERP/CRM Old System allows SQL Injection. This issue affects Finder ERP/CRM Old System: before 18.12.2024...
CVE-2020-12144
The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated. This makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted portal...
CVE-2020-12144
CVE-2020-12144 describes a trust-management vulnerability in Silver Peak EdgeConnect where the certificate used to identify the Cloud Portal to EdgeConnect devices is not validated. This allows establishing a TLS connection from EdgeConnect to an untrusted portal, potentially enabling man-in-the-...
CVE-2019-12144
CVE-2019-12144 affects Progress IPSwitch WS_FTP Server 2018 (before 8.6.1). The issue is in SSHServerAPI.dll and enables path traversal via SCP, with potential remote code execution by crafting a payload that abuses the SITE command feature. Multiple connected sources (NVD entry, CNVD entry, PRIO...
Fedora 30 : 1:ytnef (2019-7d7083b8be)
ytnef 1.9.3 release, fixing a number of security issues : - CVE-2017-9470 - CVE-2017-9471 - CVE-2017-9474 - CVE-2017-9058 - CVE-2017-12142 - CVE-2017-12141 - CVE-2017-12144 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...
CVE-2017-12144
In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file...
DEBIAN-CVE-2017-12144
In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file...
CVE-2017-12144
CVE-2017-12144 affects the ytnef package, specifically the 1.9.2 release. The vulnerability arises from an allocation failure in the function TNEFFillMapi in ytnef.c, which can lead to a denial of service when processing a crafted file. Public references in the connected records corroborate the i...