13 matches found
Linux Distros Unpatched Vulnerability : CVE-2018-11381
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The stringscanrange function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a...
CVE-2024-11381
creationtimestamp| type| source ---|---|--- 2024-11-22 05:58:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113525070794519687 2024-11-22 16:57:32+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/9141...
CVE-2024-11381 Control horas <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Control horas plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'chregistro' shortcode in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2024-11381 Control horas <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Control horas plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'chregistro' shortcode in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
WordPress Control horas Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)
Software Control horas Type Plugin Vulnerable versions = 1.0.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-11381 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 520738693bd7 Credits SOPROBRO Required privilege...
CVE-2020-11381
CVE-2020-11381 is rejected/not used and does not represent an active vulnerability entry.
CVE-2018-11381
The stringscanrange function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...
CVE-2018-11381
The CVE-2018-11381 issue affects radare2 (v2.5.0). The string_scan_range() function can be triggered by a crafted binary to cause a heap-based out-of-bounds read and application crash, constituting a denial of service. Several connected sources corroborate the vulnerability in radare2 2.5.0 and d...
CVE-2017-11381
A command injection vulnerability exists in Trend Micro Deep Discovery Director 1.1 that allows an attacker to restore accounts that can access the pre-configuration console...
Trend Micro Deep Discovery Director Multiple Vulnerabilities
1. Advisory Information Title: Trend Micro Deep Discovery Director Multiple Vulnerabilities Advisory ID: CORE-2017-0005 Advisory URL:https://www.coresecurity.com/core-labs/advisories/trend-micro-deep-discovery-director-multiple-vulnerabilities Date published: 2017-07-12 Date of last update:...