Lucene search
K

17 matches found

Circl
Circl
added 2025/12/01 3:25 p.m.3 views

CVE-2025-12559

creationtimestamp| type| source ---|---|--- 2025-12-01 15:25:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115645004340699533...

4.3CVSS5.8AI score0.00042EPSS
Exploits0References1
Circl
Circl
added 2025/01/07 3:36 a.m.5 views

CVE-2024-12559

creationtimestamp| type| source ---|---|--- 2025-01-07 03:36:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/284 2025-01-07 04:13:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113785123339765760 2025-01-07 04:15:59+00:00| seen|...

5.3CVSS8.7AI score0.00381EPSS
Exploits0References4
CVE
CVE
added 2025/01/07 3:21 a.m.75 views

CVE-2024-12559

CVE-2024-12559 affects the ClickDesigns WordPress plugin. A missing capability check in functions clickdesigns_add_api and clickdesigns_remove_api allows unauthenticated modification of the plugin’s API key across all versions up to 1.8.0. Public records confirm this can enable data modification ...

5.3CVSS5.1AI score0.00381EPSS
Exploits0References4
NVD
NVD
added 2022/12/30 10:15 p.m.5 views

CVE-2020-12559

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...

Exploits0
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.17 views

Mageia: Security Advisory (MGASA-2018-0314)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.6AI score0.00383EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2019/01/03 12:0 a.m.14 views

Fedora 28 : cantata (2018-d1f6c8957f)

Latest upstream release, omits some mounting code found to be insecure and not well tested. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possib...

9.8CVSS7.1AI score0.00383EPSS
Exploits0References5
Mageia
Mageia
added 2018/07/13 7:1 p.m.23 views

Updated cantata packages fix security vulnerability

The mount target path check in mounter.cpp 'mpOk' is insufficient. A regular user can this way mount a CIFS filesystem anywhere, and not just beneath /home by passing relative path components CVE-2018-12559. Arbitrary unmounts can be performed by regular users the same way CVE-2018-12560. A regul...

9.8CVSS1.6AI score0.00383EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2018/07/09 12:0 a.m.18 views

Fedora 27 : cantata (2018-9296823b6c)

Latest upstream release, omits some mounting code found to be insecure and not well tested. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possib...

9.8CVSS7.1AI score0.00383EPSS
Exploits0References5
ArchLinux
ArchLinux
added 2018/06/20 12:0 a.m.23 views

[ASA-201806-12] cantata: multiple issues

Arch Linux Security Advisory ASA-201806-12 ========================================== Severity: High Date : 2018-06-20 CVE-ID : CVE-2018-12559 CVE-2018-12560 CVE-2018-12561 CVE-2018-12562 Package : cantata Type : multiple issues Remote : No Link : https://security.archlinux.org/AVG-721 Summary...

9.8CVSS1.1AI score0.00383EPSS
Exploits0References8
UbuntuCve
UbuntuCve
added 2018/06/19 5:29 a.m.15 views

CVE-2018-12559

An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. The mount target path check in mounter.cpp mpOk is insufficient. A regular user can consequently mount a CIFS filesystem anywhere e.g., outside of the /home directory tree by passing directory traversal sequenc...

8.8CVSS7.2AI score0.00383EPSS
Exploits0References3
CVE
CVE
added 2018/06/19 5:0 a.m.41 views

CVE-2018-12559

CVE-2018-12559 affects Cantata up to version 2.3.1, where the cantata-mounter D-Bus service fails to validate target paths in mounter.cpp mpOk(), allowing a regular user to mount a CIFS filesystem outside the /home tree by directory traversal (e.g., home/../usr). The Mageia advisory MGASA-2018-03...

8.8CVSS8.9AI score0.00383EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2018/06/19 5:0 a.m.13 views

CVE-2018-12559

An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. The mount target path check in mounter.cpp mpOk is insufficient. A regular user can consequently mount a CIFS filesystem anywhere e.g., outside of the /home directory tree by passing directory traversal sequenc...

9.1AI score0.00383EPSS
Exploits0References2
CVE
CVE
added 2018/02/15 10:0 p.m.55 views

CVE-2017-12559

CVE-2017-12559 affects HPE Intelligent Management Center (iMC) PLAT, specifically the mibFileServlet on iMC Plat 7.3 E0504P2. The vulnerability is a directory traversal flaw in mibFileServlet that allows remote attackers to delete arbitrary files on vulnerable installations via crafted data sent ...

6.8CVSS6.5AI score0.00816EPSS
Exploits0References2Affected Software1
Check Point Advisories
Check Point Advisories
added 2017/11/23 12:0 a.m.3 views

HPE Intelligent Management Center mibFileServlet file Directory Traversal (CVE-2017-12559)

A directory traversal vulnerability exists in HPE Intelligent Management Center PLAT. The vulnerability is due to an input validation error in the mibFileServlet Servlet. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted packet to a vulnerable server...

6.8CVSS4AI score0.00816EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2017/10/06 12:0 a.m.118 views

H3C / HPE Intelligent Management Center PLAT < 7.3 E0506P03 Multiple Vulnerabilities

The version of HPE Intelligent Management Center iMC PLAT installed on the remote host is prior to 7.3 E0506P03. It is, therefore, affected by multiple vulnerabilities that can be exploited to execute arbitrary code. Note that Intelligent Management Center iMC is an HPE product; however, it is...

10CVSS7.8AI score0.85863EPSS
Exploits5References8
Cvelist
Cvelist
added 1976/01/01 12:0 a.m.7 views

CVE-2020-12559

...

Exploits0
CVE
CVE
added 1976/01/01 12:0 a.m.27 views

CVE-2020-12559

This CVE-2020-12559 entry is rejected/not used and does not represent an active vulnerability.

6.8AI score
Exploits0
Rows per page
Query Builder