Lucene search
K

23 matches found

RedhatCVE
RedhatCVE
added 2026/01/07 9:29 a.m.4 views

CVE-2019-12866

An Insecure Direct Object Reference, with Authorization Bypass through a User-Controlled Key, was possible in JetBrains YouTrack. The issue was fixed in 2018.4.49168...

9.8CVSS6.9AI score0.00004EPSS
Exploits0References1
Circl
Circl
added 2025/11/10 5:53 a.m.3 views

CVE-2025-12866

creationtimestamp| type| source ---|---|--- 2025-11-10 05:53:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5awmzljvz2k 2025-11-10 06:01:47+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m5ax44eq5c24 2025-11-10 06:25:28+00:00| seen|...

9.8CVSS5.8AI score0.00108EPSS
Exploits0References3
Circl
Circl
added 2025/03/20 10:19 a.m.2 views

CVE-2024-12866

creationtimestamp| type| source ---|---|--- 2025-03-20 10:19:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8193...

7.5CVSS7.3AI score0.00472EPSS
Exploits1References1
NVD
NVD
added 2025/03/20 10:15 a.m.2 views

CVE-2024-12866

A local file inclusion vulnerability exists in netease-youdao/qanything version v2.0.0. This vulnerability allows an attacker to read arbitrary files on the file system, which can lead to remote code execution by retrieving private SSH keys, reading private files, source code, and configuration...

7.5CVSS0.00472EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/03/20 10:11 a.m.3 views

CVE-2024-12866 Local File Inclusion in netease-youdao/qanything

A local file inclusion vulnerability exists in netease-youdao/qanything version v2.0.0. This vulnerability allows an attacker to read arbitrary files on the file system, which can lead to remote code execution by retrieving private SSH keys, reading private files, source code, and configuration...

7.5CVSS7.7AI score0.00472EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2020-12866

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of...

5.7CVSS6.4AI score0.00215EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2022/04/21 12:0 a.m.19 views

Slackware: Security Advisory (SSA:2020-139-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.7AI score0.00588EPSS
Exploits7References2
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.22 views

Mageia: Security Advisory (MGASA-2020-0360)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.1AI score0.00588EPSS
Exploits7References7
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.18 views

SUSE: Security Advisory (SUSE-SU-2020:3065-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.9AI score0.00588EPSS
Exploits7References6
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.19 views

SUSE: Security Advisory (SUSE-SU-2020:3125-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.9AI score0.00588EPSS
Exploits7References4
Tenable Nessus
Tenable Nessus
added 2020/12/09 12:0 a.m.25 views

SUSE SLED15 / SLES15 Security Update : sane-backends (SUSE-SU-2020:3065-1)

This update for sane-backends fixes the following issues : sane-backends was updated to 1.0.31 to further improve hardware enablement for scanner devices jscECO-2418 jscSLE-15561 jscSLE-15560 and also fix various security issues : CVE-2020-12861,CVE-2020-12865: Fixed an out of bounds write...

8.8CVSS6.2AI score0.00588EPSS
Exploits7References20
Tenable Nessus
Tenable Nessus
added 2020/08/25 12:0 a.m.27 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : sane-backends vulnerabilities (USN-4470-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4470-1 advisory. Kritphong Mongkhonvanit discovered that sane-backends incorrectly handled certain packets. A remote attacker could possibly use...

8.8CVSS6.9AI score0.00588EPSS
Exploits7References9
OpenVAS
OpenVAS
added 2020/08/25 12:0 a.m.30 views

Ubuntu: Security Advisory (USN-4470-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.8AI score0.00588EPSS
Exploits7References2
Ubuntu
Ubuntu
added 2020/08/24 5:38 p.m.67 views

USN-4470-1: sane-backends vulnerabilities

Kritphong Mongkhonvanit discovered that sane-backends incorrectly handled certain packets. A remote attacker could possibly use this issue to obtain sensitive memory information. This issue only affected Ubuntu 16.04 LTS. CVE-2017-6318 It was discovered that sane-backends incorrectly handled...

8.8CVSS6.5AI score0.00588EPSS
Exploits7
OSV
OSV
added 2020/06/24 1:15 p.m.2 views

CVE-2020-12866

A NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, GHSL-2020-079...

5.7CVSS8.3AI score
Exploits0References5
CVE
CVE
added 2020/06/24 12:52 p.m.180 views

CVE-2020-12866

CVE-2020-12866: A NULL pointer dereference in SANE Backends before 1.0.30 can allow a malicious device on the same local network to cause a denial of service. Documented impact is a DoS; root cause is NULL pointer dereference in SANE Backends prior to 1.0.30. Remediation: upgrade to 1.0.30 or lat...

5.7CVSS6.4AI score0.00215EPSS
Exploits1References5Affected Software1
Debian CVE
Debian CVE
added 2020/06/24 12:52 p.m.25 views

CVE-2020-12866

A NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, GHSL-2020-079...

5.7CVSS6.3AI score0.00215EPSS
Exploits1
FreeBSD
FreeBSD
added 2020/05/17 12:0 a.m.35 views

Sane -- Multiple Vulnerabilities

The Sane Project reports: epson2: fixes CVE-2020-12867 GHSL-2020-075 and several memory management issues found while addressing that CVE epsonds: addresses out-of-bound memory access issues to fix CVE-2020-12862 GHSL-2020-082 and CVE-2020-12863 GHSL-2020-083, addresses a buffer overflow fixing...

8.8CVSS2.7AI score0.00588EPSS
Exploits7References1
NVD
NVD
added 2019/07/03 7:15 p.m.14 views

CVE-2019-12866

An Insecure Direct Object Reference, with Authorization Bypass through a User-Controlled Key, was possible in JetBrains YouTrack. The issue was fixed in 2018.4.49168...

9.8CVSS8.5AI score0.00004EPSS
Exploits0References1
CVE
CVE
added 2019/07/03 6:28 p.m.170 views

CVE-2019-12866

CVE-2019-12866 affects JetBrains YouTrack and is described as an Insecure Direct Object Reference with Authorization Bypass via a user-controlled key. The issue was fixed in YouTrack version 2018.4.49168 (per JetBrains) and is reflected in multiple sources (NVD/Red Hat/CVE listings). The NVD CVSS...

9.8CVSS9.2AI score0.00004EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder