Lucene search
K

17 matches found

Circl
Circl
added 18 hours ago2 views

CVE-2026-11294

creationtimestamp| type| source ---|---|--- 2026-06-05 02:39:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnj4dosxjm24 2026-06-05 13:24:43+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918...

5.3AI score
Exploits0References2
Vulnrichment
Vulnrichment
added yesterday3 views

CVE-2026-11294

Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

5.5AI score
Exploits0References2
Cvelist
Cvelist
added yesterday7 views

CVE-2026-11294

Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 4:9 p.m.8 views

CVE-2020-11294

Out of bound write in logger due to prefix size is not validated while prepended to logging string in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

7.8CVSS7.2AI score0.00041EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/17 8:22 a.m.5 views

CVE-2024-11294 Memberful <= 1.73.9 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure

The Memberful plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.73.9 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been restricted to higher-leve...

5.3CVSS7AI score0.0061EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/12/17 8:22 a.m.12 views

CVE-2024-11294 Memberful <= 1.73.9 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure

The Memberful plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.73.9 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been restricted to higher-leve...

5.3CVSS0.0061EPSS
Exploits0References2
Circl
Circl
added 2024/03/16 7:46 a.m.1 views

CVE-2019-11294

creationtimestamp| type| source ---|---|--- 2024-03-16 07:46:38+00:00| seen| https://t.me/ctinow/209394...

4.3CVSS4.5AI score0.00228EPSS
Exploits0References1
CVE
CVE
added 2021/05/07 9:10 a.m.43 views

CVE-2020-11294

CVE-2020-11294 is a Qualcomm Snapdragon vulnerability affecting the logger component across Snapdragon Auto, Compute, Connectivity, IOT, Industrial IOT, Mobile, and Wearables. The root cause is an out-of-bounds write caused by a prefix size not being validated when prepended to the logging string...

7.8CVSS7.7AI score0.00041EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/05/07 9:10 a.m.21 views

CVE-2020-11294

Out of bound write in logger due to prefix size is not validated while prepended to logging string in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

5.9CVSS7.8AI score0.00041EPSS
Exploits0References1
NVD
NVD
added 2019/12/19 8:15 p.m.14 views

CVE-2019-11294

Cloud Foundry Cloud Controller API CAPI, version 1.88.0, allows space developers to list all global service brokers, including service broker URLs and GUIDs, which should only be accessible to admins...

4.3CVSS4.6AI score0.00228EPSS
Exploits0References1
Cvelist
Cvelist
added 2019/12/19 7:35 p.m.11 views

CVE-2019-11294 CAPI leaks service broker URLs and GUIDs to space developers

Cloud Foundry Cloud Controller API CAPI, version 1.88.0, allows space developers to list all global service brokers, including service broker URLs and GUIDs, which should only be accessible to admins...

4.3CVSS4.7AI score0.00228EPSS
Exploits0References1
CVE
CVE
added 2019/12/19 7:35 p.m.77 views

CVE-2019-11294

Summary: CVE-2019-11294 affects Cloud Foundry Cloud Controller API (CAPI) version 1.88.0, where space developers can list all global service brokers, exposing broker URLs and GUIDs that should be admin-only. The issue is a disclosure/Access Control problem within CAPI, enabling unauthorized visib...

4.3CVSS4.6AI score0.00228EPSS
Exploits0References1Affected Software2
NVD
NVD
added 2018/09/18 6:29 p.m.17 views

CVE-2018-11294

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, WLAN handler indication from the firmware gets the information for 4 access categories. While processing this information only the first 3 AC information is copied due to the improper...

8CVSS7.6AI score0.00067EPSS
Exploits0References3
Cvelist
Cvelist
added 2018/09/18 6:0 p.m.17 views

CVE-2018-11294

In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, WLAN handler indication from the firmware gets the information for 4 access categories. While processing this information only the first 3 AC information is copied due to the improper...

7.6AI score0.00067EPSS
Exploits0References3
CVE
CVE
added 2018/09/18 6:0 p.m.41 views

CVE-2018-11294

CVE-2018-11294 affects Qualcomm CAF Android WLAN components (WLAN HOST). The issue arises in the WLAN firmware handling, where information for 4 Access Categories (AC) is provided but only the first 3 ACs are copied due to improper conditional logic. This truncation potentially affects the WLAN A...

8CVSS7.4AI score0.00067EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2017/12/09 6:0 a.m.82 views

CVE-2017-11294

CVE-2017-11294 affects Adobe Shockwave Player versions earlier than 12.3.1.201. It is a memory corruption vulnerability that could allow arbitrary code execution on a user’s system. Public sources in the connected documents confirm the issue and state that exploitation could lead to code executio...

10CVSS9.7AI score0.03477EPSS
Exploits0References3Affected Software1
Kaspersky
Kaspersky
added 2017/11/14 12:0 a.m.29 views

KLA11134 ACE vulnerability in Adobe Shockwave Player

A memory corruption vulnerability was found in Adobe Shockwave Player versions earlier than 12.3.1.201. By exploiting this vulnerability malicious users can execute arbitrary code. Original advisories Security update available for Shockwave Player | APSB17-40 Related products Adobe-Shockwave-Play...

10CVSS10AI score0.03477EPSS
Exploits0References3
Rows per page
Query Builder