CVE-2025-12556

CVE-2025-12556 affects IDIS ICM Viewer. A parameter/argument injection vulnerability could allow an attacker to execute arbitrary code in the host environment (remote code execution). Public details confirm affected product and impact; some sources note that specific vulnerable versions and a fix...

CVE-2025-12556

creationtimestamp| type| source ---|---|--- 2025-11-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-05 2026-01-29 21:34:08+00:00| seen| https://mastodon.social/ap/users/115426718704364579/statuses/115980530146990237 2026-01-29 21:34:19+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2018-12556

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The signature verification routine in install.sh in yarnpkg/website through 2018-06-05 only verifies that the yarn release is signed by any arbitrary key in the...

CVE-2024-12556

creationtimestamp| type| source ---|---|--- 2025-04-08 21:22:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmdftviy6u2c 2025-04-08 21:48:46+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114304543986310341 2025-04-09 07:35:29+00:00| seen|...

CVE-2024-12556

Prototype Pollution in Kibana can lead to code injection via unrestricted file upload combined with path traversal...

CVE-2024-12556 Kibana Prototype Pollution can lead to code injection

Prototype Pollution in Kibana can lead to code injection via unrestricted file upload combined with path traversal...

CVE-2024-12556

Kibana is affected by a Prototype Pollution vulnerability (CVE-2024-12556) that can lead to code injection via an unrestricted file upload combined with path traversal. The ESA-2025-02 advisory lists affected versions 8.16.1–8.16.3 and 8.17.0–8.17.1, with remediation to upgrade to Kibana 8.16.4 o...

ges.librarycatalog.dover.nh.gov Cross Site Scripting vulnerability OBB-2222582

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| ges.librarycatalog.dover.nh.gov ---|---...

CVE-2018-12556

The signature verification routine in install.sh in yarnpkg/website through 2018-06-05 only verifies that the yarn release is signed by any arbitrary key in the local keyring of the user, and does not pin the signature to the yarn release key, which allows remote attackers to sign tampered yarn...

CVE-2018-12556

The signature verification routine in install.sh in yarnpkg/website through 2018-06-05 only verifies that the yarn release is signed by any arbitrary key in the local keyring of the user, and does not pin the signature to the yarn release key, which allows remote attackers to sign tampered yarn...

CVE-2017-12556

A Remote Code Execution vulnerability in HPE intelligent Management Center iMC PLAT version IMC Plat 7.3 E0504P2 and earlier was found...

CVE-2017-12556

CVE-2017-12556 is an RCE vulnerability in HP/HPE Intelligent Management Center (iMC) PLAT, affecting versions up to IMC Plat 7.3 E0504P2 and earlier. The root cause is a deserialization flaw in the MibBrowserTopoFilterServlet that listens on TCP ports 8080/8443 and does not validate untrusted dat...

H3C / HPE Intelligent Management Center PLAT < 7.3 E0506P03 Multiple Vulnerabilities

The version of HPE Intelligent Management Center iMC PLAT installed on the remote host is prior to 7.3 E0506P03. It is, therefore, affected by multiple vulnerabilities that can be exploited to execute arbitrary code. Note that Intelligent Management Center iMC is an HPE product; however, it is...

CVE-2020-12556

CVE-2020-12556 is rejected and not used as an active vulnerability entry.