135 matches found
MiracleLinux 8 : kernel-4.18.0-553.139.1.el8_10 (AXSA:2026-1250:48)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1250:48 advisory. kernel: scsi: target: iscsi: Fix use-after-free in iscsitdecconnusagecount CVE-2026-23216 kernel: gfs2: Fix use-after-free in iomap inline data writ...
CVE-2026-1250
The Court Reservation – Manage Your Court Bookings Online plugin for WordPress is vulnerable to generic SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.10.11 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing...
CVE-2026-1250
creationtimestamp| type| source ---|---|--- 2026-05-13 03:13:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlpdj5cwfo2g...
PT-2026-26627
Name of the Vulnerable Software and Affected Versions UTT HiPER 1250GW versions through 3.2.7-210907-180535 Description A buffer overflow issue exists in the strcpy function within the /goform/setSysAdm file. Manipulation of the GroupName argument can trigger this issue, allowing for remote...
EUVD-2026-1250
EUVD-2026-1250...
Amazon Linux 2023 : p7zip, p7zip-plugins (ALAS2023-2025-1250)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1250 advisory. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability but attack...
PT-2025-39419
Name of the Vulnerable Software and Affected Versions UTT versions 3.0.0-170831 through 3.2.2-200710 Description A security issue exists in UTT 1200GW and 1250GW. The vulnerability is due to a buffer overflow in the file /goform/formApMail. The senderEmail argument can be manipulated to trigger...
CVE-2022-1250
The LifterLMS PayPal WordPress plugin before 1.4.0 does not sanitise and escape some parameters from the payment confirmation page before outputting them back in the page, leading to a Reflected Cross-Site Scripting issue...
CVE-2019-1250
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1240, CVE-2019-1241, CVE-2019-1242, CVE-2019-1243, CVE-2019-1246, CVE-2019-124...
Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 Authentication Bypass Vulnerability
Elber Signum DVB-S/S2 IRD for Radio Networks version 1.999 suffers from an authentication bypass vulnerability through a direct and unauthorized access to the password management functionality. The issue allows attackers to bypass authentication by manipulating the setpwd endpoint that enables th...
Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 Authentication Bypass
Elber Signum DVB-S/S2 IRD For Radio Networks 1.999 Authentication Bypass Vendor: Elber S.r.l. Product web page: https://www.elber.it Affected version: 1.999 Revision 1243 1.317 Revision 602 1.220 Revision 1250 1.220 Revision 12481249 1.220 Revision 597 1.217 Revision 1242 1.214 Revision 1023 1.19...
CVE-2024-1250
creationtimestamp| type| source ---|---|--- 2024-02-12 22:31:25+00:00| seen| https://t.me/ctinow/183435...
CVE-2024-1250
An issue has been discovered in GitLab EE affecting all versions starting from 16.8 before 16.8.2. When a user is assigned a custom role with managegroupaccesstokens permission, they may be able to create group access tokens with Owner privileges, which may lead to privilege escalation...
CVE-2024-1250 Privilege Chaining in GitLab
An issue has been discovered in GitLab EE affecting all versions starting from 16.8 before 16.8.2. When a user is assigned a custom role with managegroupaccesstokens permission, they may be able to create group access tokens with Owner privileges, which may lead to privilege escalation...
CVE-2024-1250
CVE-2024-1250 affects GitLab EE versions 16.8 through 16.8.1 (before 16.8.2). Affected component: group access token creation via a custom role with the manage_group_access_tokens permission. Root cause: privilege escalation arises when a user granted this permission can create group access token...
CVE-2024-1250 Privilege Chaining in GitLab
An issue has been discovered in GitLab EE affecting all versions starting from 16.8 before 16.8.2. When a user is assigned a custom role with managegroupaccesstokens permission, they may be able to create group access tokens with Owner privileges, which may lead to privilege escalation...
CVE-2024-1250 Privilege Chaining in GitLab
An issue has been discovered in GitLab EE affecting all versions starting from 16.8 before 16.8.2. When a user is assigned a custom role with managegroupaccesstokens permission, they may be able to create group access tokens with Owner privileges, which may lead to privilege escalation...
FreeBSD : Gitlab -- vulnerabilities (6b2cba6a-c6a5-11ee-97d0-001b217b3468)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 6b2cba6a-c6a5-11ee-97d0-001b217b3468 advisory. - An issue has been discovered in GitLab EE affecting all versions from 16.4 prior to 16.6.7,...
CVE-2014-125098 Dart http_server Directory Listing virtual_directory.dart VirtualDirectory cross site scripting
A vulnerability was found in Dart httpserver up to 0.9.5 and classified as problematic. Affected by this issue is the function VirtualDirectory of the file lib/src/virtualdirectory.dart of the component Directory Listing Handler. The manipulation of the argument request.uri.path leads to cross si...