CVE-2024-2912 Insecure Deserialization Leading to RCE in bentoml/bentoml

An insecure deserialization vulnerability exists in the BentoML framework, allowing remote code execution RCE by sending a specially crafted POST request. By exploiting this vulnerability, attackers can execute arbitrary commands on the server hosting the BentoML application. The vulnerability is...

CVE-2024-2912 Insecure Deserialization Leading to RCE in bentoml/bentoml

An insecure deserialization vulnerability exists in the BentoML framework, allowing remote code execution RCE by sending a specially crafted POST request. By exploiting this vulnerability, attackers can execute arbitrary commands on the server hosting the BentoML application. The vulnerability is...

CVE-2023-2912

creationtimestamp| type| source ---|---|--- 2023-07-17 16:35:03+00:00| seen| https://t.me/cibsecurity/66811...

CVE-2023-2912

Use After Free vulnerability in Secomea SiteManager Embedded allows Obstruction...

CVE-2023-2912 SiteManager Embedded service disruption

Use After Free vulnerability in Secomea SiteManager Embedded allows Obstruction...

CVE-2023-2912 SiteManager Embedded service disruption

Use After Free vulnerability in Secomea SiteManager Embedded allows Obstruction...

CVE-2023-2912

CVE-2023-2912 is a reported Use-After-Free in Secomea SiteManager Embedded leading to service disruption (obstruction). Affected product/component: SiteManager Embedded. Root cause: use-after-free condition as described across multiple sources; impact is availability disruption. CVSSv3.1 base sco...

SUSE CVE-2013-2912

Use-after-free vulnerability in the PepperInProcessRouter::SendToHost function in content/renderer/pepper/pepperinprocessrouter.cc in the Pepper Plug-in API PPAPI in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service or possibly have unspecified other impact vi...

CVE-2022-2912

The CVE-2022-2912 entry concerns the Craw Data WordPress plugin (versions up to 1.0.0). The underlying issue is missing nonce checks in Ajax handling, allowing a logged-in administrator to modify the url parameter and trigger server-side request forgery (SSRF) to third-party sites. Exploitation d...

CVE-2022-2912 Craw Data <= 1.0.0 - Server Side Request Forgery

The Craw Data WordPress plugin through 1.0.0 does not implement nonce checks, which could allow attackers to make a logged in admin change the url value performing unwanted crawls on third-party sites SSRF...

CVE-2022-2912 Craw Data <= 1.0.0 - Server Side Request Forgery

The Craw Data WordPress plugin through 1.0.0 does not implement nonce checks, which could allow attackers to make a logged in admin change the url value performing unwanted crawls on third-party sites SSRF...

Mageia: Security Advisory (MGASA-2013-0306)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-2912

Vulnerability CVE-2020-2912 affects Oracle PeopleSoft Enterprise CS Campus Community, specifically the Self-Service component in PeopleSoft 9.2. The issue allows a low-privilege attacker with network access over HTTP to read confidential data from the Self-Service area, with the vulnerability des...

Oracle GoldenGate Manager Command Tab Parsing Denial of Service (CVE-2018-2912)

A denial of service vulnerability exists in Oracle GoldenGate Manager. The vulnerability is due to an input validation error when parsing a command which is not correctly separated by TAB characters. Successful exploitation could lead to a crash of the Manager service, causing a denial-of-service...

CVE-2018-2912

CVE-2018-2912 affects Oracle GoldenGate, specifically the Manager subcomponent. The vulnerability allows an unauthenticated, remote attacker over TCP to cause a hang or crash (DoS) in GoldenGate. Affected versions are 12.1.2.1.0, 12.2.0.2.0, and 12.3.0.1.0. The provided documents state the issue ...

CVE-2017-2912

CVE-2017-2912 affects Circle with Disney firmware 2.0.1 via the goclient SSL validation in the remote-control feature. The vulnerability arises because SSL certificate checking is insufficient: certificates for specific domains can cause goclient to accept an unintended certificate, enabling a MI...

CVE-2017-2912

An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the goclient daemon to accept a different certificate than intended. An attacker can host an HTTPS server with this certificat...

CVE-2016-2912

Cross-site scripting XSS vulnerability in the Document Builder in IBM Rational Publishing Engine aka RPENG 2.0.1 before ifix002 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-2912

CVE-2016-2912 is associated with IBM Rational Publishing Engine (RPENG) – Document Builder. The IBM Security Bulletin states that RPENG 2.0.1 before ifix002 is vulnerable to cross‑site scripting: a remote authenticated attacker can inject arbitrary script/HTML via a crafted URL due to insufficien...

Ubuntu 14.04 LTS : libssh vulnerabilities (USN-2912-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2912-1 advisory. Mariusz Ziulek discovered that libssh incorrectly handled certain packets. A remote attacker could possibly use this issue to cause libssh to crash,...