CVE-2025-12200

CVE-2025-12200 is a withdrawn candidate. Connected sources describe dnsmasq parsing failures in parse_dhcp_opt (option.c) prior to 2.73rc6 causing a local null pointer dereference. Exploitation is local; remediation is to upgrade to a version newer than 2.73rc6. Several vendors reference this iss...

CVE-2024-12200

CVE-2024-12200 affects Autodesk Navisworks family (Desktop/Manage/Freedom/Simulate) via parsing of DWFX files. The root cause is an Out-of-Bounds Write in the DWFX parser, which can cause a crash, data corruption, or arbitrary code execution in the context of the vulnerable process. Public refere...

CVE-2018-12200

creationtimestamp| type| source ---|---|--- 2019-03-14 23:20:02+00:00| seen| https://t.me/cibsecurity/3136...

CVE-2018-12200

Insufficient access control in IntelR Capability Licensing Service before version 1.50.638.1 may allow an unprivileged user to potentially escalate privileges via local access...

CVE-2018-12200

CVE-2018-12200 affects Intel Capability Licensing Service with insufficient access control in versions before 1.50.638.1, enabling an unprivileged user to escalate privileges via local access. Connected sources (Intel/Lenovo/HP advisories) corroborate a family of related Intel components (CSME, S...

Zoho ManageEngine Firewall Analyzer Group Chat Arbitrary File Upload Vulnerability

Zoho ManageEngine Firewall Analyzer is a set of Web-based firewall log analysis tools from ZOHO, which collects, correlates, analyzes, and reports on logs from firewalls, proxy servers, and Radius servers throughout the enterprise.Group Chat is one of the team communication Group Chat is one of t...

Unrestricted file upload

Zoho ManageEngine Firewall Analyzer 12200 has an unrestricted File Upload vulnerability in the "Group Chat" section. Any user can upload files with any extensions. By uploading a PHP file to the server, an attacker can cause it to execute in the server context, as demonstrated by...

CVE-2017-12200

The CVE-2017-12200 entry concerns the WordPress plugin Etoile Ultimate Product Catalog (version 4.2.11). A cross-site scripting (XSS) vulnerability exists in the Add Product Manually component, enabling a remote attacker to inject arbitrary web script or HTML. Details across sources confirm the a...

OpManager 12100 / 12200 Cross Site Scripting / Denial Of Service

Title: Multiple issues in OpManager Author: Michael Heydon Product: OpManager Tested Versions: 12100 & 12200 Vendor: Zoho ManageEngine Vendor Notified: 2016-08-14 Disclosure Date: 2016-11-20 Product Description: ==================== OpManager is a web-based network monitoring system. It is used...