CVE-2026-12942

creationtimestamp| type| source ---|---|--- 2026-07-31 17:06:30+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrxguvdzja2v...

CVE-2026-12942

Langflow OSS (IBM) is affected by CVE-2026-12942 due to a path traversal flaw in unauthenticated API endpoints. Versions 1.0.0–1.10.1 allow remote attackers to access arbitrary files via crafted URL paths containing /../ sequences, potentially exposing credentials and sensitive data. The issue is...

CVE-2019-12942

TTLock devices do not properly block guest access in certain situations where the network connection to the cloud is unavailable...

CVE-2025-12942

Improper Input Validation vulnerability in NETGEAR R6260 and NETGEAR R6850 allows unauthenticated attackers connected to LAN with ability to perform MiTM attacks and control over DNS Server to perform command execution.This issue affects R6260: through 1.1.0.86; R6850: through 1.1.0.86...

CVE-2025-12942 Improper input validation in NETGEAR R6260 and R6850

Improper Input Validation vulnerability in NETGEAR R6260 and NETGEAR R6850 allows unauthenticated attackers connected to LAN with ability to perform MiTM attacks and control over DNS Server to perform command execution.This issue affects R6260: through 1.1.0.86; R6850: through 1.1.0.86...

Linux Distros Unpatched Vulnerability : CVE-2017-12942

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function. CVE-2017-12942 Note that Nessus relies on the presence of the package as...

CVE-2024-12942 1000 Projects Portfolio Management System MCA admin_login.php sql injection

A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/adminlogin.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack...

CVE-2024-12942 1000 Projects Portfolio Management System MCA admin_login.php sql injection

A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/adminlogin.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack...

CVE-2020-12942

...

CVE-2020-12942

CVE-2020-12942 entry is rejected/not used and does not represent an active vulnerability.

SUSE: Security Advisory (SUSE-SU-2021:2834-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-12942

TTLock devices are affected by CVE-2019-12942: guest access is not properly blocked in scenarios where the cloud network is unavailable. The available documents consistently reference TTLock devices and a failure to enforce access control when cloud connectivity is broken, with no concrete detail...

CVE-2018-12942

SeedDMS (formerly LetoDMS/MyDMS) contains a SQL injection vulnerability in the Users management feature affecting versions before 5.1.8 . The flaw allows authenticated attackers to manipulate SQL queries on the application server, enabling extraction, modification, or deletion of data in the back...

CVE-2018-12942

SQL injection vulnerability in the "Users management" functionality in SeedDMS formerly LetoDMS and MyDMS before 5.1.8 allows authenticated attackers to manipulate an SQL query within the application by sending additional SQL commands to the application server. An attacker can use this...

SUSE SLES11 Security Update : unrar (SUSE-SU-2018:0862-1)

This update for unrar to version 5.6.1 fixes several issues. These security issues were fixed : - CVE-2017-12938: Prevent remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file...

CVE-2017-12942

libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function...

CVE-2017-12942

CVE-2017-12942 is a vulnerability in libunrar.a used by UnRAR prior to 5.5.7, caused by a buffer overflow in the Unpack::LongLZ function. The issue is documented in multiple advisories and was addressed in the SUSE/SUSE-SU updates for unrar (e.g., SUSE-SU-2021:2834-1) and related OSV entries, whi...