RHEL 8 : thunderbird (RHSA-2024:2912)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:2912 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.11.0. Security Fixes: firefox...

CVE-2024-2912 Insecure Deserialization Leading to RCE in bentoml/bentoml

An insecure deserialization vulnerability exists in the BentoML framework, allowing remote code execution RCE by sending a specially crafted POST request. By exploiting this vulnerability, attackers can execute arbitrary commands on the server hosting the BentoML application. The vulnerability is...

CVE-2024-2912 Insecure Deserialization Leading to RCE in bentoml/bentoml

An insecure deserialization vulnerability exists in the BentoML framework, allowing remote code execution RCE by sending a specially crafted POST request. By exploiting this vulnerability, attackers can execute arbitrary commands on the server hosting the BentoML application. The vulnerability is...

CVE-2023-2912

creationtimestamp| type| source ---|---|--- 2023-07-17 16:35:03+00:00| seen| https://t.me/cibsecurity/66811...

CVE-2023-2912

Use After Free vulnerability in Secomea SiteManager Embedded allows Obstruction...

CVE-2023-2912 SiteManager Embedded service disruption

Use After Free vulnerability in Secomea SiteManager Embedded allows Obstruction...

CVE-2023-2912 SiteManager Embedded service disruption

Use After Free vulnerability in Secomea SiteManager Embedded allows Obstruction...

CVE-2023-2912

CVE-2023-2912 is a reported Use-After-Free in Secomea SiteManager Embedded leading to service disruption (obstruction). Affected product/component: SiteManager Embedded. Root cause: use-after-free condition as described across multiple sources; impact is availability disruption. CVSSv3.1 base sco...

MSC-2022-2912

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Exfiltrating sensitive user system data –...

SUSE CVE-2013-2912

Use-after-free vulnerability in the PepperInProcessRouter::SendToHost function in content/renderer/pepper/pepperinprocessrouter.cc in the Pepper Plug-in API PPAPI in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service or possibly have unspecified other impact vi...

CVE-2022-2912

The CVE-2022-2912 entry concerns the Craw Data WordPress plugin (versions up to 1.0.0). The underlying issue is missing nonce checks in Ajax handling, allowing a logged-in administrator to modify the url parameter and trigger server-side request forgery (SSRF) to third-party sites. Exploitation d...

CVE-2022-2912 Craw Data <= 1.0.0 - Server Side Request Forgery

The Craw Data WordPress plugin through 1.0.0 does not implement nonce checks, which could allow attackers to make a logged in admin change the url value performing unwanted crawls on third-party sites SSRF...

CVE-2022-2912 Craw Data <= 1.0.0 - Server Side Request Forgery

The Craw Data WordPress plugin through 1.0.0 does not implement nonce checks, which could allow attackers to make a logged in admin change the url value performing unwanted crawls on third-party sites SSRF...

Mageia: Security Advisory (MGASA-2013-0306)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-2912

Vulnerability CVE-2020-2912 affects Oracle PeopleSoft Enterprise CS Campus Community, specifically the Self-Service component in PeopleSoft 9.2. The issue allows a low-privilege attacker with network access over HTTP to read confidential data from the Self-Service area, with the vulnerability des...

Oracle GoldenGate Manager Command Tab Parsing Denial of Service (CVE-2018-2912)

A denial of service vulnerability exists in Oracle GoldenGate Manager. The vulnerability is due to an input validation error when parsing a command which is not correctly separated by TAB characters. Successful exploitation could lead to a crash of the Manager service, causing a denial-of-service...

CVE-2018-2912

CVE-2018-2912 affects Oracle GoldenGate, specifically the Manager subcomponent. The vulnerability allows an unauthenticated, remote attacker over TCP to cause a hang or crash (DoS) in GoldenGate. Affected versions are 12.1.2.1.0, 12.2.0.2.0, and 12.3.0.1.0. The provided documents state the issue ...

CVE-2017-2912

An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the goclient daemon to accept a different certificate than intended. An attacker can host an HTTPS server with this certificat...

CVE-2017-2912

CVE-2017-2912 affects Circle with Disney firmware 2.0.1 via the goclient SSL validation in the remote-control feature. The vulnerability arises because SSL certificate checking is insufficient: certificates for specific domains can cause goclient to accept an unintended certificate, enabling a MI...

CVE-2016-2912

Cross-site scripting XSS vulnerability in the Document Builder in IBM Rational Publishing Engine aka RPENG 2.0.1 before ifix002 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...