Lucene search
K

16 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:56 a.m.6 views

CVE-2020-12834

eQ-3 Homematic Central Control Unit CCU2 through 2.51.6 and CCU3 through 3.51.6 allow Remote Code Execution in the JSON API Method ReGa.runScript, by unauthenticated attackers with access to the web interface, due to the default auto-login feature being enabled during first-time setup or factory...

9.8CVSS7.8AI score0.45806EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:10 a.m.6 views

CVE-2019-12834

In HT2 Labs Learning Locker 3.15.1, it's possible to inject malicious HTML and JavaScript code into the DOM of the website via the PATHINFO to the dashboards/ URI...

7.3CVSS6.8AI score0.00227EPSS
Exploits1References1
Circl
Circl
added 2025/12/12 8:16 a.m.2 views

CVE-2025-12834

creationtimestamp| type| source ---|---|--- 2025-12-12 08:16:07+00:00| seen| https://gist.github.com/Darkcrai86/f1760e49c27d970f5ee54c1b2e4d682e...

6.1CVSS5.7AI score0.00118EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/12/12 6:36 a.m.5 views

WordPress Accept Stripe Payments Using Contact Form 7 plugin <= 3.1 - Reflected Cross-Site Scripting via failure_message vulnerability

Reflected Cross-Site Scripting via failuremessage vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan - Knight Squad in WordPress Plugin Accept Stripe Payments Using Contact Form 7 versions = 3.1...

6.1CVSS6.1AI score0.00118EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-12834 Malicious code in @zalastax/nolb-onz (npm)

The package @zalastax/nolb-onz was found to contain malicious code...

7.2AI score
Exploits0
OSV
OSV
added 2024/12/30 5:15 p.m.1 views

CVE-2024-12834

Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interaction is required to exploit this vulnerability in that the...

7.8CVSS6.2AI score
Exploits0References1
Cvelist
Cvelist
added 2024/12/30 4:49 p.m.18 views

CVE-2024-12834 Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability

Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interaction is required to exploit this vulnerability in that the...

7.8CVSS0.00894EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/09/22 12:0 a.m.40 views

Oracle Linux 7 : qemu (ELSA-2023-12834)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12834 advisory. - virtio-crypto: verify src&dst buffer length for sym request Zhenwei Pi Orabug: 35724113 CVE-2023-3180 - hw/scsi/lsi53c895a: Fix reentrancy issues in...

6.5CVSS7AI score0.00033EPSS
Exploits0References4
CVE
CVE
added 2020/05/15 4:14 p.m.87 views

CVE-2020-12834

The Red Hat CVE record confirms CVE-2020-12834 affects eQ-3 Homematic CCU2 (version 2.51.6 and earlier) and CCU3 (version 3.51.6 and earlier). The vulnerability enables Remote Code Execution via the JSON API method ReGa.runScript due to the default auto-login feature being enabled during initial ...

9.8CVSS9.6AI score0.45806EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2020/05/15 4:14 p.m.13 views

CVE-2020-12834

eQ-3 Homematic Central Control Unit CCU2 through 2.51.6 and CCU3 through 3.51.6 allow Remote Code Execution in the JSON API Method ReGa.runScript, by unauthenticated attackers with access to the web interface, due to the default auto-login feature being enabled during first-time setup or factory...

9.8AI score0.45806EPSS
Exploits1References1
OSV
OSV
added 2019/07/16 6:15 p.m.10 views

CVE-2019-12834

In HT2 Labs Learning Locker 3.15.1, it's possible to inject malicious HTML and JavaScript code into the DOM of the website via the PATHINFO to the dashboards/ URI...

6.1CVSS6.8AI score0.00227EPSS
Exploits1References1
Cvelist
Cvelist
added 2019/07/16 5:55 p.m.9 views

CVE-2019-12834

In HT2 Labs Learning Locker 3.15.1, it's possible to inject malicious HTML and JavaScript code into the DOM of the website via the PATHINFO to the dashboards/ URI...

7.3CVSS7.2AI score0.00227EPSS
Exploits1References1
CVE
CVE
added 2019/07/16 5:55 p.m.158 views

CVE-2019-12834

HT2 Labs Learning Locker 3.15.1 has a cross-site scripting (XSS) flaw allowing injection of HTML/JavaScript into the DOM via PATH_INFO to the dashboards/ URI. The vulnerability is documented across multiple CVE records in the connected set, with consistent description of DOM-based injection and l...

7.3CVSS6.3AI score0.00227EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2019/03/05 8:0 p.m.10 views

CVE-2017-12834

...

Exploits0
CVE
CVE
added 2018/10/12 6:0 p.m.53 views

CVE-2018-12834

CVE-2018-12834 affects Adobe Acrobat and Reader versions including 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier. The connected documents corroborate an out-of-bounds read vulnerability in these products, with successful exploitation described as enabling ...

5.5CVSS5.6AI score0.01753EPSS
Exploits0References3Affected Software2
Check Point Advisories
Check Point Advisories
added 2018/10/02 12:0 a.m.2 views

Adobe Acrobat and Reader Out-of-bounds read (APSB18-30: CVE-2018-12834)

A out of bounds read vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

4.3CVSS5.8AI score0.01753EPSS
Exploits0
Rows per page
Query Builder