17 matches found
CVE-2026-12942
creationtimestamp| type| source ---|---|--- 2026-07-31 17:06:30+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrxguvdzja2v...
CVE-2026-12942
Langflow OSS (IBM) is affected by CVE-2026-12942 due to a path traversal flaw in unauthenticated API endpoints. Versions 1.0.0–1.10.1 allow remote attackers to access arbitrary files via crafted URL paths containing /../ sequences, potentially exposing credentials and sensitive data. The issue is...
CVE-2019-12942
TTLock devices do not properly block guest access in certain situations where the network connection to the cloud is unavailable...
CVE-2025-12942
Improper Input Validation vulnerability in NETGEAR R6260 and NETGEAR R6850 allows unauthenticated attackers connected to LAN with ability to perform MiTM attacks and control over DNS Server to perform command execution.This issue affects R6260: through 1.1.0.86; R6850: through 1.1.0.86...
CVE-2025-12942 Improper input validation in NETGEAR R6260 and R6850
Improper Input Validation vulnerability in NETGEAR R6260 and NETGEAR R6850 allows unauthenticated attackers connected to LAN with ability to perform MiTM attacks and control over DNS Server to perform command execution.This issue affects R6260: through 1.1.0.86; R6850: through 1.1.0.86...
Linux Distros Unpatched Vulnerability : CVE-2017-12942
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function. CVE-2017-12942 Note that Nessus relies on the presence of the package as...
CVE-2024-12942 1000 Projects Portfolio Management System MCA admin_login.php sql injection
A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/adminlogin.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack...
CVE-2024-12942 1000 Projects Portfolio Management System MCA admin_login.php sql injection
A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/adminlogin.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack...
CVE-2020-12942
CVE-2020-12942 entry is rejected/not used and does not represent an active vulnerability.
SUSE: Security Advisory (SUSE-SU-2021:2834-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-12942
TTLock devices are affected by CVE-2019-12942: guest access is not properly blocked in scenarios where the cloud network is unavailable. The available documents consistently reference TTLock devices and a failure to enforce access control when cloud connectivity is broken, with no concrete detail...
CVE-2018-12942
SQL injection vulnerability in the "Users management" functionality in SeedDMS formerly LetoDMS and MyDMS before 5.1.8 allows authenticated attackers to manipulate an SQL query within the application by sending additional SQL commands to the application server. An attacker can use this...
CVE-2018-12942
SeedDMS (formerly LetoDMS/MyDMS) contains a SQL injection vulnerability in the Users management feature affecting versions before 5.1.8 . The flaw allows authenticated attackers to manipulate SQL queries on the application server, enabling extraction, modification, or deletion of data in the back...
SUSE SLES11 Security Update : unrar (SUSE-SU-2018:0862-1)
This update for unrar to version 5.6.1 fixes several issues. These security issues were fixed : - CVE-2017-12938: Prevent remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file...
CVE-2017-12942
libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function...
CVE-2017-12942
CVE-2017-12942 is a vulnerability in libunrar.a used by UnRAR prior to 5.5.7, caused by a buffer overflow in the Unpack::LongLZ function. The issue is documented in multiple advisories and was addressed in the SUSE/SUSE-SU updates for unrar (e.g., SUSE-SU-2021:2834-1) and related OSV entries, whi...