19 matches found
CVE-2018-12537
This repository does not have a README...
CVE-2026-12537 vulnerabilities
Vulnerabilities for packages: gemini-cli...
CVE-2026-12537
creationtimestamp| type| source ---|---|--- 2026-06-24 17:55:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2ie25yct2k 2026-06-29 01:20:33+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpfd3vdhxd2f 2026-08-08 11:50:10+00:00| seen|...
Exploit for Allocation of Resources Without Limits or Throttling in Openwebui Open_Webui
CVE-2024-12537 Open WebUI Code Format DoS Lab This repository...
@13w/local-rag (2.0.0), @apekshik/grok-cli-apek (>=0.1.5, <=0.1.6) +32 more potentially affected by CVE-2026-12537 via @google/gemini-cli (>=0.1.17, <=0.39.0-nightly.20260411.0957f7d3e)
@google/gemini-cli NPM version =0.1.17, =0.1.5, =0.1.0, =1.0.0, =0.0.17, =0.6.4, =0.0.1, =1.3.0, =0.1.4, =0.1.10, =1.0.0, =2.0.0 and more Source cves: CVE-2026-12537 Source advisory: OSV:GHSA-WPQR-6V78-JR5G...
CVE-2019-12537
An issue was discovered in Zoho ManageEngine AssetExplorer. There is XSS via the SearchN.do search field...
CVE-2025-12537
creationtimestamp| type| source ---|---|--- 2025-12-15 08:51:12+00:00| seen| https://gist.github.com/Darkcrai86/e9a5b82df561b49fc7a885ab0af9bfb1...
CVE-2024-12537
creationtimestamp| type| source ---|---|--- 2025-04-04 09:35:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10423 2025-08-11 18:27:49+00:00| seen| MISP/3e4b778d-5810-4171-a915-f1d106684af4...
CVE-2024-12537
Open WebUI contains an unauthenticated resource consumption/DoS risk in the code formatting endpoint. Affected product: open-webui/open-webui (example version 0.3.32). Root cause: lack of authentication allows unauthenticated users to POST to /api/v1/utils/code/format with high-volume content, po...
CVE-2024-12537
...
CVE-2020-12537
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...
CVE-2019-12537
Zoho ManageEngine AssetExplorer is affected by a cross-site scripting (XSS) issue exposed via the SearchN.do search field. Multiple connected sources corroborate that the vulnerability enables XSS through this input point; however, none of the documents provide a concrete patch, fixed version, or...
CVE-2018-12537
CVE-2018-12537 affects Eclipse Vert.x core: HTTP header processing in Vert.x HttpServer and HttpClient between Vert.x 3.0 and 3.5.1 does not filter CRLF characters, enabling injection of arbitrary HTTP headers in requests/responses. The issue stems from improper CRLF neutralization. Red Hat’s adv...
Moderate: Red Hat Security Advisory: Red Hat OpenShift Application Runtimes security and bug fix update
An update is now available for Red Hat OpenShift Application Runtimes. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
CVE-2017-12537
CVE-2017-12537 describes a Remote Code Execution vulnerability in Hewlett Packard Enterprise Intelligent Management Center (iMC) PLAT version 7.3 (E0504). The issue is resolved in PLAT v7.3 (E0506) or any later version. Connected sources corroborate an RCE impacting iMC PLAT and indicate multiple...
CVE-2017-12537
A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...
HTTP Header Injection
vertx-core is vulnerable to HTTP header injections. The library does not validate HTTP header values, allowing attackers to inject arbitrary headers in requests. This vulnerability is a different vulnerability from CVE-2018-12537, however the fix for CVE-2018-12537 remediates this vulnerability...