Lucene search
K

21 matches found

NVD
NVD
added 2026/06/05 3:16 p.m.12 views

CVE-2026-11335

A flaw has been found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. This impacts the function sessionstart of the file /login-form.php. Executing a manipulation of the argument UserAuthData can lead to session fixiation...

7.5CVSS0.00232EPSS
Exploits0References6
Circl
Circl
added 2025/10/06 1:59 p.m.3 views

CVE-2025-11335

creationtimestamp| type| source ---|---|--- 2025-10-06 13:59:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115327577399848313...

7.2CVSS5.8AI score0.04755EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2017-11335

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is a heap based buffer overflow in tools/tiff2pdf.c of LibTIFF 4.0.8 via a PlanarConfig=Contig image, which causes a more than one hundred bytes...

8.8CVSS7.7AI score0.0363EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/02/21 8:37 a.m.10 views

CVE-2024-11335

The UltraEmbed – Advanced Iframe Plugin For WordPress with Gutenberg Block Included plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'iframe' shortcode in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping on user...

6.4CVSS5.7AI score0.00304EPSS
Exploits0References1
Circl
Circl
added 2025/02/19 8:15 a.m.17 views

CVE-2024-11335

creationtimestamp| type| source ---|---|--- 2025-02-19 08:15:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdi36gjl2t 2025-02-19 08:41:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4788 2025-02-19 15:39:51+00:00| seen|...

6.4CVSS8.7AI score0.00304EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/02/19 7:32 a.m.5 views

CVE-2024-11335 UltraEmbed – Advanced Iframe Plugin For WordPress with Gutenberg Block Included <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

The UltraEmbed – Advanced Iframe Plugin For WordPress with Gutenberg Block Included plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'iframe' shortcode in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping on user...

6.4CVSS5.8AI score0.00304EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/02/19 7:32 a.m.11 views

CVE-2024-11335 UltraEmbed – Advanced Iframe Plugin For WordPress with Gutenberg Block Included <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

The UltraEmbed – Advanced Iframe Plugin For WordPress with Gutenberg Block Included plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'iframe' shortcode in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping on user...

6.4CVSS0.00304EPSS
Exploits0References2
CVE
CVE
added 2025/02/19 7:32 a.m.37 views

CVE-2024-11335

CVE-2024-11335 affects the WordPress plugin “UltraEmbed – Advanced Iframe Plugin For WordPress with Gutenberg Block Included.” It is vulnerable to a Stored Cross-Site Scripting (XSS) via the plugin’s iframe shortcode in all versions up to 1.0.3 due to insufficient input sanitization and output es...

6.4CVSS5.7AI score0.00304EPSS
Exploits0References2
CVE
CVE
added 2021/12/20 10:45 p.m.25 views

CVE-2020-11335

CVE-2020-11335 is rejected/not used per the initial description; does not represent an active vulnerability entry.

6.7AI score
Exploits0
Cvelist
Cvelist
added 2021/12/20 10:45 p.m.13 views

CVE-2020-11335

...

Exploits0
OpenVAS
OpenVAS
added 2021/02/22 12:0 a.m.29 views

Huawei EulerOS: Security Advisory for compat-libtiff3 (EulerOS-SA-2021-1285)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.7AI score0.04766EPSS
Exploits1References2
Prion
Prion
added 2021/02/09 6:15 p.m.14 views

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

6.8CVSS7.3AI score0.02865EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/02/09 3:46 p.m.31 views

CVE-2020-17432

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

3.3CVSS7.3AI score0.02865EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2021/01/20 12:0 a.m.36 views

EulerOS 2.0 SP3 : compat-libtiff3 (EulerOS-SA-2021-1062)

According to the versions of the compat-libtiff3 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - tools/tiffcrop.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service heap-based buffer over-read and buffer overflow o...

8.8CVSS8.3AI score0.0363EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2021/01/19 12:0 a.m.25 views

Huawei EulerOS: Security Advisory for compat-libtiff3 (EulerOS-SA-2021-1062)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.2AI score0.0363EPSS
Exploits1References2
NVD
NVD
added 2018/07/04 12:29 a.m.12 views

CVE-2018-11335

GVToken Genesis Vision GVT is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner...

7.5CVSS7.6AI score0.00988EPSS
Exploits0References2
CVE
CVE
added 2018/07/04 12:0 a.m.45 views

CVE-2018-11335

CVE-2018-11335 describes a vulnerability in GVToken Genesis Vision (GVT), a smart contract on Ethereum. The mint function contains an integer overflow that allows the contract owner to arbitrarily retrieve minted tokens. The issue is rooted in arithmetic handling within mint, enabling the owner t...

7.5CVSS7.6AI score0.00988EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2018/05/09 12:1 p.m.7 views

SUSE-SU-2018:1179-1 Security update for tiff

This update for tiff fixes the following issues: - CVE-2016-9453: The t2preadwritepdfimagetile function allowed remote attackers to cause a denial of service out-of-bounds write and crash or possibly execute arbitrary code via a JPEG file with a TIFFTAGJPEGTABLES of length one bsc1011107. -...

9.8CVSS9.4AI score0.04797EPSS
Exploits7References25
Debian
Debian
added 2018/01/27 4:48 p.m.47 views

[SECURITY] [DSA 4100-1] tiff security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4100-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 27, 2018 https://www.debian.org/security/faq -...

8.8CVSS9.2AI score0.03918EPSS
Exploits3
Debian
Debian
added 2017/09/10 2:14 a.m.32 views

[SECURITY] [DLA 1094-1] tiff3 security update

Package : tiff3 Version : 3.9.6-11+deb7u8 CVE ID : CVE-2017-11335 Debian Bug : 868513 A heap based buffer overflow has been discovered in the tiff2pdf utility, part of the Tag Image File Format TIFF library. A PlanarConfig=Contig image can cause an out-of-bounds write related to the ZIPDecode...

8.8CVSS7.8AI score0.0363EPSS
Exploits1
Rows per page
Query Builder