23 matches found
CVE-2025-12437 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-12437 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2025-12437 vulnerabilities
Vulnerabilities for packages: chromium...
Linux Distros Unpatched Vulnerability : CVE-2026-12437
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WebShare in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially...
CVE-2026-12437
creationtimestamp| type| source ---|---|--- 2026-06-16 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1925 2026-06-17 01:56:44+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-google-chrome-56 2026-06-17 23:39:54+00:00| seen|...
CVE-2018-12437
creationtimestamp| type| source ---|---|--- 2026-04-21 19:25:24+00:00| seen| Telegram/IV3XUTumqBvhxDGxYKmJv890gnK1hu13PgwZ6nuJXKkSo...
CVE-2025-15638 Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt
Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt. Net::Dropbear versions before 0.14 includes versions of Dropbear 2019.78 or earlier. These include versions of libtomcrypt v1.18.1 or earlier, which is affected by CVE-2016-6129 and CVE-2018-12437...
PT-2026-33994
Name of the Vulnerable Software and Affected Versions Net::Dropbear versions prior to 0.14 Description Net::Dropbear for Perl contains a vulnerable version of libtomcrypt, specifically including versions of Dropbear 2019.78 or earlier. Recommendations Update Net::Dropbear to version 0.14 or later...
CVE-2025-15638: Dependency on Vulnerable Third-Party Component
Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt. Net::Dropbear versions before 0.14 includes versions of Dropbear 2019.78 or earlier. These include versions of libtomcrypt v1.18.1 or earlier, which is affected by CVE-2016-6129 and CVE-2018-12437...
CVE-2025-12437
Use after free in PageInfo in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2025-12437
Use after free in PageInfo in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-12437
A use after free vulnerability exists in the PageInfo component of Google Chrome (prior to version 142.0.7444.59) and Microsoft Edge . A remote attacker could exploit this via a crafted HTML page by convincing a user to perform specific UI gestures , potentially leading to heap corruption . This ...
CVE-2025-12437
creationtimestamp| type| source ---|---|--- 2025-11-03 08:30:48+00:00| seen| https://gist.github.com/Darkcrai86/558c7a72853f275608e30f5bd70b5fc0 2026-09-09 05:00:12+00:00| seen| https://t.me/IntelEncyclopedia/2248 2026-09-10 00:00:39+00:00| published-proof-of-concept|...
Chromium: CVE-2025-12437 Use after free in PageInfo
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2024-12437
The Marketplace Items plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'envato' shortcode in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2024-12437
creationtimestamp| type| source ---|---|--- 2025-01-07 06:46:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113785725707848489 2025-01-07 07:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5445onan2m 2025-01-07 07:15:58+00:00| seen|...
CVE-2024-12437 Marketplace Items <= 1.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Marketplace Items plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'envato' shortcode in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
GLSA-202007-53 : Dropbear: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202007-53 Dropbear: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Dropbear. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...
CVE-2019-12437
CVE-2019-12437 affects SilverStripe up to 4.3.3, where the prior fix for SS-2018-007 does not fully mitigate CSRF in GraphQL mutations. Connected sources (GHSA/OSV/Red Hat) indicate this CSRF protection was not complete and fixes exist in SilverStripe GraphQL at versions 2.0.5 and 3.1.2. Remediat...
