17 matches found
CVE-2025-12503
creationtimestamp| type| source ---|---|--- 2025-11-03 08:40:45+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4pmp42kla42 2025-11-03 15:27:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4qdhqt6td2n...
CVE-2024-12503
A vulnerability classified as problematic was found in ClassCMS 4.8. Affected by this vulnerability is an unknown functionality of the file /index.php/admin of the component Model Management Page. The manipulation of the argument URL leads to cross site scripting. The attack can be launched...
CVE-2024-12503
A vulnerability classified as problematic was found in ClassCMS 4.8. Affected by this vulnerability is an unknown functionality of the file /index.php/admin of the component Model Management Page. The manipulation of the argument URL leads to cross site scripting. The attack can be launched...
CVE-2024-12503 ClassCMS Model Management Page admin cross site scripting
A vulnerability classified as problematic was found in ClassCMS 4.8. Affected by this vulnerability is an unknown functionality of the file /index.php/admin of the component Model Management Page. The manipulation of the argument URL leads to cross site scripting. The attack can be launched...
Korenix CSRF / Backdoor Accounts / Command Injection / Missing Authentication Vulnerabilities
Multiple Korenix products are affected by unauthenticated device administration, backdoor accounts, cross site request forgery, unauthenticated tftp actions, and command injection vulnerabilities. Products affected include JetNet 5428G-20SFP, JetNet 5810G, JetNet 4706F, JetNet 4706, JetNet 4706,...
CVE-2020-12503
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT all versions and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below is prone to...
CVE-2020-12503 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products
Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT all versions and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below is prone to...
CVE-2020-12503
CVE-2020-12503 affects Pepperl+Fuchs P+F Comtrol RocketLinx devices (ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT) and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN with firmware 1.2.3 and earlier. The vulnerability...
CVE-2020-12503
creationtimestamp| type| source ---|---|--- 2020-10-07 11:00:02+00:00| seen| https://t.me/SecLabNews/8977 2020-10-15 22:40:53+00:00| seen| https://t.me/cibsecurity/15304...
CVE-2019-12503
creationtimestamp| type| source ---|---|--- 2019-12-03 16:02:40+00:00| seen| https://t.me/cibsecurity/8436 2024-03-05 09:42:24+00:00| seen| https://t.me/ctinow/200045...
CVE-2019-12503
CVE-2019-12503 affects the Inateck BCST-60 wireless barcode scanner. The issue is unencrypted and unauthenticated data communication allowing keystroke injection, enabling an attacker to send arbitrary keystrokes to a victim’s computer and potentially install malware when the target system uses a...
CVE-2018-12503
tinyexr 0.9.5 has a heap-based buffer over-read in LoadEXRImageFromMemory in tinyexr.h...
CVE-2018-12503
tinyexr 0.9.5 has a heap-based buffer over-read in LoadEXRImageFromMemory in tinyexr.h...
CVE-2018-12503
Summary: CVE-2018-12503 affects tinyexr 0.9.5 and is a heap-based buffer over-read in LoadEXRImageFromMemory (tinyexr.h). The primary sources describe a heap-based over-read vulnerability in tinyexr 0.9.5; ISO/Risk details are supported by CVSS metrics (NVD: CVSS v2 base 7.5 HIGH; CVSS v3 base 9....
CVE-2018-12503
tinyexr 0.9.5 has a heap-based buffer over-read in LoadEXRImageFromMemory in tinyexr.h...
CVE-2017-12503
A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...
CVE-2017-12503
CVE-2017-12503 affects HPE Intelligent Management Center (iMC) PLAT 7.3 (E0504); a remote code execution vulnerability exists due to an Expression Language injection in the templateSelect endpoint. Remediation: upgrade to PLAT 7.3 (E0506) or later. Several sources (e.g., ZDI-17-666, NVD/NVD mirro...