66 matches found
Low: unbound
Issue Overview: No CVE associated with this advisory Affected Packages: unbound Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue Correction: Run yum update unbound or yum update...
Fedora: Security Advisory (FEDORA-2025-16df491a66)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2025-224e937c18)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 41 : unbound (2025-224e937c18)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-224e937c18 advisory. Fix CVE-2025-11411 possible domain hijacking attack, reported by Yuxiao Wu, Yunyi Zhang, Baojun Liu and Haixin Duan from Tsinghua University. Tenable has...
Linux Distros Unpatched Vulnerability : CVE-2025-11411
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replie...
Unbound DNS Resolver < 1.24.2 Domain Hijacking Vulnerabilities
Unbound DNS Resolver is prone to a domain hijacking vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
libunbound8-1.24.1-1.1 on GA media (moderate)
libunbound8-1.24.1-1.1 on GA media Announcement ID: openSUSE-SU-2025:15668-1 Rating: moderate Cross-References: CVE-2025-11411 CVSS scores: CVE-2025-11411 SUSE : 6.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:L CVE-2025-11411 SUSE : 7.1...
CVE-2025-11411
NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually these RRSets are...
CVE-2025-11411
NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually these RRSets are...
CVE-2024-11411
The Spotlightr plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'spotlightr-v' shortcode in all versions up to, and including, 0.1.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2024-11411
creationtimestamp| type| source ---|---|--- 2024-12-20 07:05:46+00:00| seen| https://infosec.exchange/users/cve/statuses/113683880039836247 2024-12-20 07:15:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldptopqajy2z 2024-12-20 09:13:22+00:00| seen|...
CVE-2020-11411
CVE-2020-11411 is rejected/not used per the Initial Description.
Fedora: Security Advisory for mujs (FEDORA-2020-53773f4954)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora 32 : mujs (2020-496ab4615a)
A new version of mujs is now available for Fedora and EPEL. Besides generic enhancements and bugfixes, this release also fixes three tracked security issues: CVE-2019-11411, CVE-2019-11412 and CVE-2019-11413. Note that Tenable Network Security has extracted the preceding description block directl...
Fedora 31 : mujs (2020-53773f4954)
A new version of mujs is now available for Fedora and EPEL. Besides generic enhancements and bugfixes, this release also fixes three tracked security issues: CVE-2019-11411, CVE-2019-11412 and CVE-2019-11413. Note that Tenable Network Security has extracted the preceding description block directl...
GLSA-202007-52 : mujs: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202007-52 mujs: Multiple vulnerabilities Multiple vulnerabilities have been discovered in mujs. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...
CVE-2019-11411
CVE-2019-11411 affects Artifex MuJS 1.0.5, where a stack-based buffer overflow exists in Number#toFixed() and numtostr in jsnumber.c. The vulnerability is demonstrated in the Fedora advisories that update MuJS to 1.0.9 for Fedora 32/31/33, addressing CVE-2019-11411 (along with CVE-2019-11412/1141...
CVE-2018-11411
DimonCoin (FUD) ERC20 token vulnerable in transferFrom due to incorrect _value computation, enabling overflow to let an attacker steal victims’ balances; no patch details provided in the available documents.
SUSE SLES11 Security Update : wireshark (SUSE-SU-2017:2032-1)
This wireshark update to version 2.2.8 fixes the following issues: Security issues fixed : - CVE-2017-11411: The openSAFETY dissectorcould crash or exhaust system memory because of missing length validation. bsc1049621 - CVE-2017-11410: The WBXML dissector could go into an infinite loop. bsc10492...