Lucene search
+L

16 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 9:56 a.m.•21 views

CVE-2020-12834

eQ-3 Homematic Central Control Unit CCU2 through 2.51.6 and CCU3 through 3.51.6 allow Remote Code Execution in the JSON API Method ReGa.runScript, by unauthenticated attackers with access to the web interface, due to the default auto-login feature being enabled during first-time setup or factory...

9.8CVSS8.2AI score0.11072EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:10 a.m.•16 views

CVE-2019-12834

In HT2 Labs Learning Locker 3.15.1, it's possible to inject malicious HTML and JavaScript code into the DOM of the website via the PATHINFO to the dashboards/ URI...

7.3CVSS6.9AI score0.00865EPSS
SaveExploits2References1
Circl
Circl
•added 2025/12/12 8:16 a.m.•12 views

CVE-2025-12834

creationtimestamp| type| source ---|---|--- 2025-12-12 08:16:07+00:00| seen| https://gist.github.com/Darkcrai86/f1760e49c27d970f5ee54c1b2e4d682e...

6.1CVSS5.8AI score0.00249EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/12/12 6:36 a.m.•18 views

WordPress Accept Stripe Payments Using Contact Form 7 plugin <= 3.1 - Reflected Cross-Site Scripting via failure_message vulnerability

Reflected Cross-Site Scripting via failuremessage vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan - Knight Squad in WordPress Plugin Accept Stripe Payments Using Contact Form 7 versions = 3.1...

6.1CVSS6.1AI score0.00249EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2025/08/14 6:52 p.m.•6 views

MAL-2025-12834 Malicious code in @zalastax/nolb-onz (npm)

The package @zalastax/nolb-onz was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
•added 2024/12/30 5:15 p.m.•15 views

CVE-2024-12834

Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interaction is required to exploit this vulnerability in that the...

7.8CVSS6.2AI score0.00352EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/30 4:49 p.m.•49 views

CVE-2024-12834 Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability

Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interaction is required to exploit this vulnerability in that the...

7.8CVSS0.00352EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2023/09/22 12:00 a.m.•55 views

Oracle Linux 7 : qemu (ELSA-2023-12834)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12834 advisory. - virtio-crypto: verify src&dst buffer length for sym request Zhenwei Pi Orabug: 35724113 CVE-2023-3180 - hw/scsi/lsi53c895a: Fix reentrancy issues in...

6.5CVSS7AI score0.00259EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2020/05/15 4:14 p.m.•42 views

CVE-2020-12834

eQ-3 Homematic Central Control Unit CCU2 through 2.51.6 and CCU3 through 3.51.6 allow Remote Code Execution in the JSON API Method ReGa.runScript, by unauthenticated attackers with access to the web interface, due to the default auto-login feature being enabled during first-time setup or factory...

9.8AI score0.11072EPSS
SaveExploits1References1
CVE
CVE
•added 2020/05/15 4:14 p.m.•113 views

CVE-2020-12834

The Red Hat CVE record confirms CVE-2020-12834 affects eQ-3 Homematic CCU2 (version 2.51.6 and earlier) and CCU3 (version 3.51.6 and earlier). The vulnerability enables Remote Code Execution via the JSON API method ReGa.runScript due to the default auto-login feature being enabled during initial ...

9.8CVSS9.6AI score0.11072EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2019/07/16 6:15 p.m.•27 views

CVE-2019-12834

In HT2 Labs Learning Locker 3.15.1, it's possible to inject malicious HTML and JavaScript code into the DOM of the website via the PATHINFO to the dashboards/ URI...

6.1CVSS6.8AI score
SaveExploits0References1
CVE
CVE
•added 2019/07/16 5:55 p.m.•176 views

CVE-2019-12834

HT2 Labs Learning Locker 3.15.1 has a cross-site scripting (XSS) flaw allowing injection of HTML/JavaScript into the DOM via PATH_INFO to the dashboards/ URI. The vulnerability is documented across multiple CVE records in the connected set, with consistent description of DOM-based injection and l...

7.3CVSS6.3AI score0.00865EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2019/07/16 5:55 p.m.•39 views

CVE-2019-12834

In HT2 Labs Learning Locker 3.15.1, it's possible to inject malicious HTML and JavaScript code into the DOM of the website via the PATHINFO to the dashboards/ URI...

7.3CVSS7.2AI score0.00865EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2019/03/05 8:00 p.m.•21 views

CVE-2017-12834

...

SaveExploits0
CVE
CVE
•added 2018/10/12 6:00 p.m.•76 views

CVE-2018-12834

CVE-2018-12834 affects Adobe Acrobat and Reader versions including 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier. The connected documents corroborate an out-of-bounds read vulnerability in these products, with successful exploitation described as enabling ...

5.5CVSS5.6AI score0.04428EPSS
SaveExploits0References3Affected Software2
Check Point Advisories
Check Point Advisories
•added 2018/10/02 12:00 a.m.•20 views

Adobe Acrobat and Reader Out-of-bounds read (APSB18-30: CVE-2018-12834)

A out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

4.3CVSS5.8AI score0.04428EPSS
SaveExploits0
Rows per page
Query Builder