Code injection

GramAddict through 1.2.3 allows remote attackers to execute arbitrary code because of use of UIAutomator2 and ATX-Agent. The attacker must be able to reach TCP port 7912, e.g., by being on the same Wi-Fi network...

CVE-2020-36245

GramAddict through 1.2.3 allows remote attackers to execute arbitrary code because of use of UIAutomator2 and ATX-Agent. The attacker must be able to reach TCP port 7912, e.g., by being on the same Wi-Fi network...

CVE-2020-36245

GramAddict versions up to 1.2.3 are affected by a remote code execution flaw due to the use of UIAutomator2 and ATX-Agent. An attacker who can reach TCP port 7912 (e.g., on the same Wi‑Fi network) can trigger arbitrary code execution. Documentation consistently states the vulnerability is exposur...

CVE-2020-7912

CVE-2020-7912 affects JetBrains YouTrack prior to version 2019.2.59309. The issue allows access to SMTP/Jabber settings via backups, indicating the backups stored configuration data that should have been protected. The Red Hat and NVD entries corroborate the same description. The JetBrains securi...

CVE-2020-7912

In JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1535)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-7912

A file upload filter bypass exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with admin privileges to edit configuration keys to remove file extension filters, potentially resulting in the malicious uploa...

CVE-2019-7912

CVE-2019-7912 affects Magento 2.1 (<2.1.18), 2.2 (<2.2.9), and 2.3 (

CVE-2017-7912

creationtimestamp| type| source ---|---|--- 2019-04-08 18:31:35+00:00| seen| https://t.me/cibsecurity/3581...

CVE-2017-7912

The CVE-2017-7912 issue affects Hanwha Techwin SRN-4000 network video recording devices prior to firmware SRN4000_v2.16_170401. A specially crafted HTTP request/response could bypass authentication and grant admin access to the device management web portal. This is categorized as Improper Access ...

CVE-2018-7912

CVE-2018-7912 entry is rejected/not used and does not represent an active vulnerability.

CVE-2018-7912

...

arcataweather.com XSS vulnerability

Open Bug Bounty ID: OBB-537679 Description| Value ---|--- Affected Website:| arcataweather.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2016-7912

Use-after-free vulnerability in the ffsusercopyworker function in drivers/usb/gadget/function/ffs.c in the Linux kernel before 4.5.3 allows local users to gain privileges by accessing an I/O data structure after a certain callback call...

CVE-2016-7912

Use-after-free vulnerability in the ffsusercopyworker function in drivers/usb/gadget/function/ffs.c in the Linux kernel before 4.5.3 allows local users to gain privileges by accessing an I/O data structure after a certain callback call...

CVE-2016-7912

The CVE-2016-7912 entry describes a use-after-free in the Linux kernel involving ffs_user_copy_worker in drivers/usb/gadget/function/f_fs.c, prior to version 4.5.3. This flaw lets local users escalate privileges by accessing an I/O data structure after a callback, as documented in multiple source...

Debian DLA-506-1 : dhcpcd5 security update

Two vulnerabilities were discovered in dhcpcd5 a DHCP client package. A remote on a local network attacker can possibly execute arbitrary code or cause a denial of service attack by crafted messages. CVE-2014-7912 The getoption function does not validate the relationship between length fields and...

[SECURITY] [DLA 506-1] dhcpcd5 security update

Package : dhcpcd5 Version : 5.5.6-1+deb7u2 CVE ID : CVE-2014-7912 CVE-2014-7913 Debian Bug : N/A Two vulnerabilities were discovered in dhcpcd5 a DHCP client package. A remote on a local network attacker can possibly execute arbitrary code or cause a denial of service attack by crafted messages...

FreeBSD : dhcpcd -- remote code execution/denial of service (092156c9-04d7-11e6-b1ce-002590263bf5)

MITRE reports : The getoption function in dhcp.c in dhcpcd before 6.2.0, as used in dhcpcd 5.x in Android before 5.1 and other products, does not validate the relationship between length fields and the amount of data, which allows remote DHCP servers to execute arbitrary code or cause a denial of...

CVE-2015-7912

The CVE-2015-7912 entry describes a remote code execution vulnerability in Tibbo AggreGate Platform prior to version 5.30.06. The issue resides in the Ice Faces servlet within ag_server_service.exe of the AggreGate Server Service, allowing an unauthenticated remote attacker to upload and execute ...