CVE-2026-12970

creationtimestamp| type| source ---|---|--- 2026-07-20 08:55:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr2wc3gzwr2i...

CVE-2025-12970 affecting package fluent-bit for versions less than 3.0.6-5

CVE-2025-12970 affecting package fluent-bit for versions less than 3.0.6-5. A patched version of the package is available...

CVE-2025-12970

...

CVE-2025-12970

creationtimestamp| type| source ---|---|--- 2025-11-25 12:05:31+00:00| seen| https://gist.github.com/Darkcrai86/9c78936ffd5178a4049061473f0a3a90 2025-12-05 10:34:04+00:00| seen| https://bsky.app/profile/secqube.com/post/3m7abxzh6rw2z 2026-07-26 02:00:08+00:00| seen| https://t.me/cyberwarehouse/10...

AZL-71074 CVE-2025-12970 affecting package fluent-bit for versions less than 3.0.6-6

The extractname function in Fluent Bit indocker input plugin copies container names into a fixed size stack buffer without validating length. An attacker who can create containers or control container names, can supply a long name that overflows the buffer, leading to process crash or arbitrary...

CVE-2024-12970

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TUBITAK BILGEM Pardus OS My Computer allows OS Command Injection. This issue affects Pardus OS My Computer: before 0.7.2...

CVE-2024-12970 OS Command Injection in TUBITAK BILGEM's Pardus OS My Computer

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TUBITAK BILGEM Pardus OS My Computer allows OS Command Injection. This issue affects Pardus OS My Computer: before 0.7.2...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2023-12970)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12970 advisory. - Bluetooth: L2CAP: Fix use-after-free in l2capsockreadycb Sungwoo Kim Orabug: 35814478 CVE-2023-40283 - net/sched: clsu32: No longer copy tcfresu...

CVE-2020-12970

...

CVE-2020-12970

CVE-2020-12970 entry is rejected and not used; not an active vulnerability.

CVE-2019-12970

CVE-2019-12970 is a disclosed XSS in SquirrelMail prior to updates addressing versions up to 1.4.22 and 1.5.x through 1.5.2. Root cause: improper handling of RCDATA/RAWTEXT in the sanitization mechanism allows bypass, enabling malicious script injection from HTML e-mails when assets such as NOEMB...

SquirrelMail 1.4.22 Cross Site Scripting

Advisory ID: SYSS-2019-016 Product: SquirrelMail Manufacturer: The SquirrelMail Project Affected Versions: 1.4.22, SVN Tested Versions: SVN Vulnerability Type: Cross-Site Scripting CWE-79 Risk Level: Medium Solution Status: Open Manufacturer Notification: 2019-04-17 Solution Date: N/A Public...

CVE-2017-12970

Cross-site request forgery CSRF vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack the authentication of authenticated users for requests that 1 add or 2 delete user accounts via a request to phpsftpd/users.php...

CVE-2017-12970

Apache2Triad 1.5.4 is affected by CVE-2017-12970 (CSRF). Multiple sources describe a CSRF weakness in phpsftpd/users.php that can allow an attacker to hijack the authenticated user’s session to add or delete user accounts. The Alpha-vendor product is Apache2Triad; no explicit remediation/patch ve...

Apache2Triad 1.5.4 - Multiple Vulnerabilities

Exploit for php platform in category web applications + Credits: John Page AKA hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/APACHE2TRIAD-SERVER-STACK-v1.5.4-MULTIPLE-CVE.txt + ISR: ApparitionSec Vendor: =============== apache2triad.net...