18 matches found
CVE-2026-12537
creationtimestamp| type| source ---|---|--- 2026-06-24 17:55:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2ie25yct2k 2026-06-29 01:20:33+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpfd3vdhxd2f...
Exploit for Allocation of Resources Without Limits or Throttling in Openwebui Open_Webui
CVE-2024-12537 Open WebUI Code Format DoS Lab This repository...
CVE-2019-12537
An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via the SearchN.do search field...
CVE-2025-12537
creationtimestamp| type| source ---|---|--- 2025-12-15 08:51:12+00:00| seen| https://gist.github.com/Darkcrai86/e9a5b82df561b49fc7a885ab0af9bfb1...
CVE-2024-12537
creationtimestamp| type| source ---|---|--- 2025-04-04 09:35:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10423 2025-08-11 18:27:49+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...
openwebui-token-tracking (=0.1.7) potentially affected by CVE-2024-12537 via open-webui (=0.6.0)
open-webui PYPI version =0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking =0.1.7 Source cves: CVE-2024-12537 Source advisory: SNYK:PYTHON-OPENWEBUI-9680268...
CVE-2024-12537 Unauthenticated Denial of Service in open-webui/open-webui
In version 0.3.32 of open-webui/open-webui, the absence of authentication mechanisms allows any unauthenticated attacker to access the api/v1/utils/code/format endpoint. If a malicious actor sends a POST request with an excessively high volume of content, the server could become completely...
CVE-2024-12537 Unauthenticated Denial of Service in open-webui/open-webui
In version 0.3.32 of open-webui/open-webui, the absence of authentication mechanisms allows any unauthenticated attacker to access the api/v1/utils/code/format endpoint. If a malicious actor sends a POST request with an excessively high volume of content, the server could become completely...
CVE-2024-12537
Summary: CVE-2024-12537 affects open-webui/open-webui v0.3.32, where unauthenticated access to /api/v1/utils/code/format can be abused by a high-volume POST to trigger unresponsiveness. Documented impact is denial of service / service degradation. A remediation is available: upgrade to open-webui...
CVE-2020-12537
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...
CVE-2019-12537
Zoho ManageEngine AssetExplorer is affected by a cross-site scripting (XSS) issue exposed via the SearchN.do search field. Multiple connected sources corroborate that the vulnerability enables XSS through this input point; however, none of the documents provide a concrete patch, fixed version, or...
as.leap:vertx-rpc (>=3.0.0 <=3.3.8), be.fluid-it.reactive-microservice.bundle:bootique-vertx (>=0.1-0 <=0.1-8) +1062 more potentially affected by CVE-2018-12537 via io.vertx:vertx-core (>=3.0.0 <=3.5.1)
io.vertx:vertx-core MAVEN version =3.0.0, =3.0.0, =0.1-0, =0.1-0, =1.2.1, =3.0.5, =1.0.0, =0.4.2, =0.4.2, =0.4.2, =0.4.2, =0.4.5 and more Source cves: CVE-2018-12537 Source advisory: OSV:GHSA-6CW8-7J6C-HCCP...
CVE-2018-12537
CVE-2018-12537 affects Eclipse Vert.x core: HTTP header processing in Vert.x HttpServer and HttpClient between Vert.x 3.0 and 3.5.1 does not filter CRLF characters, enabling injection of arbitrary HTTP headers in requests/responses. The issue stems from improper CRLF neutralization. Red Hat’s adv...
Moderate: Red Hat Security Advisory: Red Hat OpenShift Application Runtimes security and bug fix update
An update is now available for Red Hat OpenShift Application Runtimes. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
CVE-2017-12537
CVE-2017-12537 describes a Remote Code Execution vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 (E0504). The issue is resolved in PLAT v7.3 (E0506) or any later version. Connected sources corroborate an RCE impacting iMC PLAT and indicate multiple...
CVE-2017-12537
A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...
HTTP Header Injection
vertx-core is vulnerable to HTTP header injections. The library does not validate HTTP header values, allowing attackers to inject arbitrary headers in requests. This vulnerability is a different vulnerability from CVE-2018-12537, however the fix for CVE-2018-12537 remediates this vulnerability...