35 matches found
CVE-2026-11352 vulnerabilities
Vulnerabilities for packages: eco-python-curl...
CVE-2026-11352
creationtimestamp| type| source ---|---|--- 2026-07-03 21:32:17+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mprioe4hwb2n 2026-07-07 20:02:28+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mq3fjgesej2n...
BELL-CVE-2026-11352
Bulletin has no description...
Curl 8.18.0 < 8.21.0 QUIC Zero-Length UDP Datagrams DoS
The version of curl installed on the remote host is 8.18.0 prior to 8.21.0. It is, therefore, affected by a denial of service vulnerability: - An issue in curl's QUIC UDP receive function allows a malicious HTTP/3 server to trigger a remote denial of service by continuously streaming empty...
CURL-CVE-2026-11352 QUIC zero-length UDP datagrams busy-loop
An issue in curl’s QUIC UDP receive function allows a malicious HTTP/3 server to trigger a remote denial of service against a curl or libcurl client. Because the helper function discards zero-length UDP datagrams before counting them toward the per-call packet budget, a connected QUIC peer can...
Linux Distros Unpatched Vulnerability : CVE-2026-11352
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in curl's QUIC UDP receive function allows a malicious HTTP/3 server to trigger a remote denial of service against a curl or libcurl client. Because th...
curl: CVE-2026-11352: QUIC zero-length UDP datagrams busy-loop
Summary: curl's QUIC UDP receive helper ignores zero-length UDP datagrams before counting them against the per-call packet budget. On Linux, recvmmsgpackets loops while pkts maxpkts, but if!mmsgi.msglen continue; runs before pkts is incremented. The recvmsgpackets backend has the same no-progress...
Oracle Linux 10 : xorg-x11-server-Xwayland (ELSA-2026-11352)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-11352 advisory. 24.1.5-6 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves:...
Linux Distros Unpatched Vulnerability : CVE-2017-11352
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c. NOTE: this vulnerability exists becau...
CVE-2024-11352
The TwentyTwenty plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'twentytwenty' shortcode in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2024-11352 TwentyTwenty <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
The TwentyTwenty plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'twentytwenty' shortcode in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2024-11352
The CVE-2024-11352 entry concerns the TwentyTwenty WordPress plugin. It describes a Stored Cross-Site Scripting (XSS) vulnerability in the plugin’s twentytwenty shortcode, affecting all versions up to 1.0.1. exploitation requires authenticated access at contributor level or higher, enabling an at...
CVE-2020-11352
This CVE-2020-11352 entry is rejected/not used and does not represent an active vulnerability.
CVE-2018-11352
The vulnerability CVE-2018-11352 affects Wallabag 2.2.3–2.3.2 and is a stored XSS in the configuration page. It allows execution of JavaScript when an administrator visits the config page, requiring authentication and potentially enabling session theft. No remediation details are provided in the ...
USN-3681-1: ImageMagick vulnerabilities | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Description It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could...
Ubuntu: Security Advisory (USN-3681-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 4040-1] imagemagick security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4040-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 17, 2017 https://www.debian.org/security/faq -...
Fedora Update for techne FEDORA-2017-8f27031c8f
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for perl-Image-SubImageFind FEDORA-2017-8f27031c8f
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...