17 matches found
CVE-2025-12559
creationtimestamp| type| source ---|---|--- 2025-12-01 15:25:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115645004340699533...
CVE-2024-12559
creationtimestamp| type| source ---|---|--- 2025-01-07 03:36:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/284 2025-01-07 04:13:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113785123339765760 2025-01-07 04:15:59+00:00| seen|...
CVE-2024-12559
CVE-2024-12559 affects the ClickDesigns WordPress plugin. A missing capability check in functions clickdesigns_add_api and clickdesigns_remove_api allows unauthenticated modification of the plugin’s API key across all versions up to 1.8.0. Public records confirm this can enable data modification ...
CVE-2020-12559
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...
Mageia: Security Advisory (MGASA-2018-0314)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 28 : cantata (2018-d1f6c8957f)
Latest upstream release, omits some mounting code found to be insecure and not well tested. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possib...
Updated cantata packages fix security vulnerability
The mount target path check in mounter.cpp 'mpOk' is insufficient. A regular user can this way mount a CIFS filesystem anywhere, and not just beneath /home by passing relative path components CVE-2018-12559. Arbitrary unmounts can be performed by regular users the same way CVE-2018-12560. A regul...
Fedora 27 : cantata (2018-9296823b6c)
Latest upstream release, omits some mounting code found to be insecure and not well tested. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possib...
[ASA-201806-12] cantata: multiple issues
Arch Linux Security Advisory ASA-201806-12 ========================================== Severity: High Date : 2018-06-20 CVE-ID : CVE-2018-12559 CVE-2018-12560 CVE-2018-12561 CVE-2018-12562 Package : cantata Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-721 Summary...
CVE-2018-12559
An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. The mount target path check in mounter.cpp mpOk is insufficient. A regular user can consequently mount a CIFS filesystem anywhere e.g., outside of the /home directory tree by passing directory traversal sequenc...
CVE-2018-12559
CVE-2018-12559 affects Cantata up to version 2.3.1, where the cantata-mounter D-Bus service fails to validate target paths in mounter.cpp mpOk(), allowing a regular user to mount a CIFS filesystem outside the /home tree by directory traversal (e.g., home/../usr). The Mageia advisory MGASA-2018-03...
CVE-2018-12559
An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. The mount target path check in mounter.cpp mpOk is insufficient. A regular user can consequently mount a CIFS filesystem anywhere e.g., outside of the /home directory tree by passing directory traversal sequenc...
CVE-2017-12559
CVE-2017-12559 affects HPE Intelligent Management Center (iMC) PLAT, specifically the mibFileServlet on iMC Plat 7.3 E0504P2. The vulnerability is a directory traversal flaw in mibFileServlet that allows remote attackers to delete arbitrary files on vulnerable installations via crafted data sent ...
HPE Intelligent Management Center mibFileServlet file Directory Traversal (CVE-2017-12559)
A directory traversal vulnerability exists in HPE Intelligent Management Center PLAT. The vulnerability is due to an input validation error in the mibFileServlet Servlet. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted packet to a vulnerable server...
H3C / HPE Intelligent Management Center PLAT < 7.3 E0506P03 Multiple Vulnerabilities
The version of HPE Intelligent Management Center iMC PLAT installed on the remote host is prior to 7.3 E0506P03. It is, therefore, affected by multiple vulnerabilities that can be exploited to execute arbitrary code. Note that Intelligent Management Center iMC is an HPE product; however, it is...
CVE-2020-12559
...
CVE-2020-12559
This CVE-2020-12559 entry is rejected/not used and does not represent an active vulnerability.