10 matches found
CVE-2020-12887
Memory leaks were discovered in the CoAP library in Arm Mbed OS 5.15.3 when using the Arm mbed-coap library 5.1.5. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparse parses the CoAP option number field of all options present in the input packet...
CVE-2019-12887
KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control issue 1 of 2...
CVE-2025-12887
creationtimestamp| type| source ---|---|--- 2025-12-03 14:26:45+00:00| seen| https://gist.github.com/Darkcrai86/764f381d1c6a68ff4fab8155f1baf620...
Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2024-12887)
The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12887 advisory. - mm: shmem: fix data-race in shmemgetattr Jeongjun Park Orabug: 37268580 CVE-2024-50228 - wifi: iwlwifi: mvm: fix 6 GHz scan construction Johanne...
CVE-2020-12887
CVE-2020-12887 concerns memory leak in the Arm Mbed OS CoAP library: when using mbed-coap 5.1.5, the sn_coap_parser_options_parse() function parses option numbers by summing previous option numbers and deltas, with 16-bit integers and no overflow checks. This can cause a crafted packet to wrap an...
Denial of Service Vulnerability in Quick Easy FTP Server (CNVD-2020-12887)
Quick Easy FTP Server is a small FTP server. A denial of service vulnerability exists in Quick Easy FTP Server. An attacker can exploit the vulnerability to cause the program to crash...
CVE-2019-12887
KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control issue 1 of 2...
CVE-2019-12887
LinOTP (KeyIdentity LinOTP) before 2.10.5.3 has an Incorrect Access Control vulnerability (CVE-2019-12887). Affected product: KeyIdentity LinOTP. Root cause: insufficient access restrictions allowing unauthorized roles to access resources. Impact: confidentiality, integrity, and availability can ...
CVE-2019-12888
CVE-2019-12888 is rejected and not used; reference CVE-2019-12887 instead.
Microsoft Edge Memory Corruption Vulnerability (CNVD-2018-12887)
Edge is Microsoft's browser for Windows 10. A memory corruption vulnerability exists in Microsoft Edge. The vulnerability stems from Microsoft Edge failing to properly access objects in memory. An attacker can exploit the vulnerability to execute arbitrary code in the context of the current user,...