158 matches found
MiracleLinux 3 : subversion-1.6.11-12.0.1.AXS3 (AXSA:2014-230:01)
The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-230:01 advisory. Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files a...
EUVD-2026-2112
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2019-2112
In several functions of alarm.cc, there is possible memory corruption due to a use after free. This could lead to local code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-8.0 Android-8.1 Android-9...
CVE-2024-2112
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.15.22 via the signature functionality. This makes it possible for unauthenticated attackers to extract sensitive...
CVE-2024-2112
creationtimestamp| type| source ---|---|--- 2025-11-20 10:52:56+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m62lztqs2s25...
CVE-2025-8934 1000 Projects Sales Management System sales.php cross site scripting
A vulnerability has been found in 1000 Projects Sales Management System 1.0. Affected is an unknown function of the file /sales.php. The manipulation of the argument select2112 leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...
CVE-2021-2112
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...
CVE-2010-2112
Directory traversal vulnerability in the FTP service in FileCOPA before 5.03 allows remote attackers to read or overwrite arbitrary files via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2002-2112
RCA Digital Cable Modem DCM225 and DCM225E, and other modems that must conform to the Data-over-Cable Service Interface Specifications DOCSIS standard, uses the "public" community string for SNMP access, which allows remote attackers to read or write MIB information...
CVE-2025-2112
A vulnerability was found in user-xiangpeng yaoqishan up to a47fec4a31cbd13698c592dfdc938c8824dd25e4. It has been declared as critical. Affected by this vulnerability is the function getMediaLisByFilter of the file cn/javaex/yaoqishan/service/mediainfo/MediaInfoService.java. The manipulation of t...
CVE-2025-2112
A vulnerability was found in user-xiangpeng yaoqishan up to a47fec4a31cbd13698c592dfdc938c8824dd25e4. It has been declared as critical. Affected by this vulnerability is the function getMediaLisByFilter of the file cn/javaex/yaoqishan/service/mediainfo/MediaInfoService.java. The manipulation of t...
CVE-2025-2112
A vulnerability was found in user-xiangpeng yaoqishan up to a47fec4a31cbd13698c592dfdc938c8824dd25e4. It has been declared as critical. Affected by this vulnerability is the function getMediaLisByFilter of the file cn/javaex/yaoqishan/service/mediainfo/MediaInfoService.java. The manipulation of t...
CVE-2025-2112
creationtimestamp| type| source ---|---|--- 2025-03-08 21:41:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6949 2025-03-09 00:40:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljvsgnebyj26 2025-03-09 01:13:28+00:00| seen|...
CVE-2025-2112 user-xiangpeng yaoqishan MediaInfoService.java getMediaLisByFilter sql injection
A vulnerability was found in user-xiangpeng yaoqishan up to a47fec4a31cbd13698c592dfdc938c8824dd25e4. It has been declared as critical. Affected by this vulnerability is the function getMediaLisByFilter of the file cn/javaex/yaoqishan/service/mediainfo/MediaInfoService.java. The manipulation of t...
CVE-2025-2112 user-xiangpeng yaoqishan MediaInfoService.java getMediaLisByFilter sql injection
A vulnerability was found in user-xiangpeng yaoqishan up to a47fec4a31cbd13698c592dfdc938c8824dd25e4. It has been declared as critical. Affected by this vulnerability is the function getMediaLisByFilter of the file cn/javaex/yaoqishan/service/mediainfo/MediaInfoService.java. The manipulation of t...
CVE-2025-2112
CVE-2025-2112 affects user-xiangpeng yaoqishan; the vulnerable component is MediaInfoService.getMediaLisByFilter in cn/javaex/yaoqishan/service/media_info/MediaInfoService.java. The root cause is manipulation of the argument typeId, leading to SQL injection. This can be triggered remotely and, pe...
Linux Distros Unpatched Vulnerability : CVE-2016-2112
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the client ldap sasl wrapping...
CVE-2022-2112
Improper Neutralization of Formula Elements in a CSV File in GitHub repository inventree/inventree prior to 0.7.2...
PT-2024-9535 · Totolink · Totolink Ex1800T
Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1800T version 9.1.0cu.2112 B20220316 Description: A problematic issue has been found in the function sub 40662C of the file /cgi-bin/cstecgi.cgi. The manipulation of the ssid argument leads to a stack-based buffer overflow. The...
CVE-2024-2112 Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.22 - Sensitive Information Exposure
The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.15.22 via the signature functionality. This makes it possible for unauthenticated attackers to extract sensitive...