Fedora 44 : avr-binutils (2025-e14cb89c28)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-e14cb89c28 advisory. Automatic update for avr-binutils-2.45-4.fc44. Changelog Mon Oct 20 2025 Michal Hlavinka - 1:2.45-4 - fix CVE-2025-11083: heap-based overflow rhbz2400336...

Fedora: Security Advisory (FEDORA-2025-10c80b93e9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-5abaff3fcb)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 42 : insight (2025-5abaff3fcb)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-5abaff3fcb advisory. Fix CVS 2025-11082 and 2025-11083. + conditional for explicit BR tcl/tk 8 + dummy rpm check section. Tenable has extracted the preceding description...

SUSE CVE-2025-11083

A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elfswapshdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed to the public an...

AZL-67911 CVE-2025-11083 affecting package gdb for versions less than 11.2-10

A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elfswapshdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed to the public an...

CVE-2016-11083

An issue was discovered in Mattermost Server before 2.2.0. It allows XSS because it configures files to be opened in a browser window...

CVE-2024-11083

creationtimestamp| type| source ---|---|--- 2024-11-27 05:40:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113553312887723730...

CVE-2020-11083

In October from version 1.0.319 and before version 1.0.466, a user with access to a markdown FormWidget that stores data persistently could create a stored XSS attack against themselves and any other users with access to the generated HTML from the field. This has been fixed in 1.0.466. For users...

CVE-2020-11083 Stored XSS in October

In October from version 1.0.319 and before version 1.0.466, a user with access to a markdown FormWidget that stores data persistently could create a stored XSS attack against themselves and any other users with access to the generated HTML from the field. This has been fixed in 1.0.466. For users...

CVE-2020-11083

CVE-2020-11083 is a stored XSS vulnerability in October CMS: versions prior to 1.0.466 (and affected RainLab.Blog prior to 1.4.1) allow a user with access to a markdown FormWidget that stores data persistently to inject HTML/JS for themselves and other users who view the generated HTML. The issue...

CVE-2016-11083

creationtimestamp| type| source ---|---|--- 2020-06-20 00:55:23+00:00| seen| https://t.me/cibsecurity/12936...

CVE-2016-11083

CVE-2016-11083 affects Mattermost Server prior to 2.2.0. The issue enables cross-site scripting (XSS) by configuring files to be opened in a browser window, allowing embedded scripts to run under certain conditions. The vulnerability originates from how files are rendered, not from external input...

CVE-2018-11083 Bosh accepts refresh tokens in place of an access token

Cloud Foundry BOSH, versions v264 prior to v264.14.0 and v265 prior to v265.7.0 and v266 prior to v266.8.0 and v267 prior to v267.2.0, allows refresh tokens to be as access tokens when using UAA for authentication. A remote attacker with an admin refresh token given by UAA can be used to access...

CVE-2018-11083

CVE-2018-11083 affects Cloud Foundry BOSH prior to 264.14.0, 265.7.0, 266.8.0, and 267.2.0. The root cause is that BOSH accepts admin refresh tokens issued by UAA as if they were access tokens, allowing a remote attacker with such a token to access BOSH resources even after the attacker’s user sh...