12 matches found
CVE-2025-12554
Missing Security Headers.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2024-12554
The Peter’s Custom Anti-Spam plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.3. This is due to missing nonce validation on the casregisterpost function. This makes it possible for unauthenticated attackers to blacklist emails via a forged...
CVE-2024-12554
creationtimestamp| type| source ---|---|--- 2024-12-18 09:28:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113673114798725226 2024-12-18 12:01:13+00:00| seen| https://t.me/cvedetector/13177...
CVE-2024-12554 Peter’s Custom Anti-Spam <= 3.2.3 - Cross-Site Request Forgery via cas_register_post Function
The Peter’s Custom Anti-Spam plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.3. This is due to missing nonce validation on the casregisterpost function. This makes it possible for unauthenticated attackers to blacklist emails via a forged...
CVE-2024-12554
CVE-2024-12554 concerns Peter’s Custom Anti-Spam for WordPress. The issue is a Cross-Site Request Forgery due to missing nonce validation in cas_register_post(), enabling unauthenticated actors to blacklist emails by luring an admin to perform an action. The vulnerability is explicitly documented...
CVE-2019-12554
In SweetScape 010 Editor 9.0.1, improper validation of arguments in the internal implementation of the WSubStr function provided by the scripting engine allows an attacker to cause a denial of service by crashing the application...
CVE-2019-12554
SweetScape 010 Editor 9.0.1 is affected by a vulnerability in the scripting engine’s WSubStr function, where improper validation of arguments allows a denial of service by crashing the application. Root cause: insufficient input/argument validation within the internal WSubStr implementation. Affe...
CVE-2018-12554
CVE-2018-12554 is rejected/not used and does not represent an active vulnerability entry.
CVE-2018-12554
...
CVE-2017-12554
The CVE-2017-12554 entry concerns Hewlett Packard Enterprise Intelligent Management Center (iMC) Platform (iMC Plat) versions up to 7.3 E0504P2 and earlier. The root cause is a path validation flaw in the mibFileServlet, which handles HTTP(S) ports 8080 and 8443. This lack of proper validation al...
H3C / HPE Intelligent Management Center PLAT < 7.3 E0506P03 Multiple Vulnerabilities
The version of HPE Intelligent Management Center iMC PLAT installed on the remote host is prior to 7.3 E0506P03. It is, therefore, affected by multiple vulnerabilities that can be exploited to execute arbitrary code. Note that Intelligent Management Center iMC is an HPE product; however, it is...
CVE-2020-12554
CVE-2020-12554 entry is rejected and not used as per initial description.