CVE-2026-11410

An authenticated OS command injection vulnerability exists in the BigPond Cable BPA WAN configuration module in TL-WR940N v6 due to improper sanitization of user input. An attacker with administrative access may exploit this issue to execute arbitrary system commands with elevated privileges...

CVE-2026-11410

creationtimestamp| type| source ---|---|--- 2026-06-17 00:40:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moh3bjgwv222...

Wireshark 2.0.x < 2.0.12 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 2.0.12. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.0.12 advisory. - In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an infinit...

CVE-2025-11410

A flaw has been found in Campcodes Advanced Online Voting Management System 1.0. This affects an unknown function of the file /admin/votersadd.php. Executing manipulation of the argument firstname can lead to sql injection. The attack can be executed remotely. The exploit has been published and m...

Linux Distros Unpatched Vulnerability : CVE-2018-11410

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Liblouis 3.5.0. A invalid free in the compileRule function in compileTranslationTable.c allows remote attackers to cause a denial of...

Linux Distros Unpatched Vulnerability : CVE-2017-11410

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture...

CVE-2024-11410

CVE-2024-11410 – YooBar (WordPress) Stored XSS : In YooBar plugin, stored cross-site scripting affects all versions up to 2.0.6 due to insufficient input sanitization and output escaping in Yoo Bar settings. An authenticated attacker with Contributor-level access or higher can inject arbitrary sc...

MSC-2023-11410

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Exfiltrating sensitive user system data –...

PT-2022-11410

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description The issue was initially considered but further investigation showed it was not a security issue. It was withdrawn by its CNA. Recommendations At the moment, there is no...

CVE-2020-11410

...

CVE-2020-11410

CVE-2020-11410 entry is rejected and not used; it does not represent an active vulnerability entry.

SUSE: Security Advisory (SUSE-SU-2019:0795-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-11410

app/backup/index.php in the Backup Module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input validation, which allows authenticated administrative attackers to execute commands on the host...

CVE-2019-11410

app/backup/index.php in the Backup Module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input validation, which allows authenticated administrative attackers to execute commands on the host...

CVE-2019-11410

app/backup/index.php in the Backup Module in FusionPBX 4.4.3 suffers from a command injection vulnerability due to a lack of input validation, which allows authenticated administrative attackers to execute commands on the host...

CVE-2019-11410

The CVE-2019-11410 entry concerns FusionPBX 4.4.3, where the Backup Module’s app/backup/index.php suffers from a command-injection vulnerability due to insufficient input validation. The issue enables authenticated administrative attackers to execute arbitrary commands on the host. Multiple trust...

openSUSE: Security Advisory for liblouis (openSUSE-SU-2019:1160-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLED15 / SLES15 Security Update : liblouis (SUSE-SU-2019:0795-1)

This update for liblouis fixes the following issues : Security issues fixed : CVE-2018-17294: Fixed an out of bounds read in matchCurrentInput function which could allow a remote attacker to cause Denail of Service bsc1109319. CVE-2018-11410: Fixed an invalid free in the compileRule function in...

Ubuntu: Security Advisory (USN-3669-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Liblouis vulnerabilities (USN-3669-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3669-1 advisory. It was discovered that Liblouis incorrectly handled certain files. An attacker could possibly use this to cause a denial of...