24 matches found
CVE-2018-12633
creationtimestamp| type| source ---|---|--- 2025-12-31 21:00:05+00:00| published-proof-of-concept| Telegram/WM5aRmLNN8SCWpXVVoY7OnDGEMmwc48OmxYNihktG3f9fQ...
WordPress BookIt plugin <= 2.5.0 - Missing Authorization to Unauthenticated Stripe Connection vulnerability
Missing Authorization to Unauthenticated Stripe Connection vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan - Knight Squad in WordPress Plugin BookIt versions = 2.5.0...
CVE-2024-12633
creationtimestamp| type| source ---|---|--- 2025-01-07 05:38:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/335 2025-01-07 06:16:25+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yrnqa6g2c 2025-01-07 06:18:53+00:00| seen|...
CVE-2017-12633
creationtimestamp| type| source ---|---|--- 2024-01-07 09:40:05+00:00| seen| https://t.me/arpsyndicate/2636...
Security Bulletin: Multiple vulnerabilities in Apache Camel core affect IBM Application Performance Management products
Summary Apache Camel core is used by IBM Application Performance Management. The vulnerabilities in the product component have been addressed. Vulnerability Details CVEID:CVE-2014-0002 DESCRIPTION: Apache Camel could allow a remote attacker to obtain sensitive information, caused by an error in t...
org.apache.camel:camel-hessian-starter (=2.20.0) potentially affected by CVE-2017-12633 via org.apache.camel:camel-hessian (=2.20.0)
org.apache.camel:camel-hessian MAVEN version =2.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.camel:camel-hessian and may be impacted: - org.apache.camel:camel-hessian-starter =2.20.0 Source cves: CVE-2017-12633 Source advisory:...
org.apache.camel:camel-hessian-starter (>=2.18.0 <=2.19.3) potentially affected by CVE-2017-12633 via org.apache.camel:camel-hessian (>=2.18.0 <=2.19.3)
org.apache.camel:camel-hessian MAVEN version =2.18.0, =2.18.0, =2.19.3 Source cves: CVE-2017-12633 Source advisory: OSV:GHSA-5WHJ-523X-6J68...
CVE-2021-31478
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2019-12633 Cisco Unified Contact Center Express Request Processing Server-Side Request Forgery Vulnerability
A vulnerability in Cisco Unified Contact Center Express Unified CCX could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery SSRF attack on a targeted system. The vulnerability is due to improper validation of user-supplied input on the...
CVE-2019-12633
CVE-2019-12633 refers to a Server-Side Request Forgery (SSRF) vulnerability in Cisco Unified Contact Center Express (Unified CCX). The root cause is improper validation of user-supplied input on the affected web interface, allowing an unauthenticated, remote attacker to bypass access controls and...
Fedora Update for kernel FEDORA-2019-16de0047d4
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora 28 : kernel (2018-d92fde52d7)
The v4.17.3 update contains important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...
Fedora Update for kernel FEDORA-2018-a0914af224
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for kernel FEDORA-2018-9f4381d8c4
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for kernel FEDORA-2018-d82a45d9ab
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for kernel FEDORA-2018-d92fde52d7
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 27 : kernel (2018-2a0f8b2c9d)
The v4.17.3 update contains important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...
CVE-2018-12633
An issue was discovered in the Linux kernel through 4.17.2. vbgmiscdeviceioctl in drivers/virt/vboxguest/vboxguestlinux.c reads the same user data twice with copyfromuser. The header part of the user data is double-fetched, and a malicious user thread can tamper with the critical variables...
CVE-2018-12633
An issue was discovered in the Linux kernel through 4.17.2. vbgmiscdeviceioctl in drivers/virt/vboxguest/vboxguestlinux.c reads the same user data twice with copyfromuser. The header part of the user data is double-fetched, and a malicious user thread can tamper with the critical variables...
CVE-2018-12633
CVE-2018-12633 affects the Linux kernel up to 4.17.2, where vbg_misc_device_ioctl() in drivers/virt/vboxguest/vboxguest_linux.c double-fetches header data from user input via copy_from_user. A race condition lets a local attacker tamper with hdr.size_in and hdr.size_out between fetches, enabling ...