Lucene search
K

8 matches found

NVD
NVD
added 2024/12/07 2:15 a.m.12 views

CVE-2024-11436

The Drag & Drop Builder, Human Face Detector, Pre-built Templates, Spam Protection, User Email Notifications & more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.4.19 due to insufficient input sanitization an...

6.1CVSS0.01989EPSS
Exploits0References2
Circl
Circl
added 2024/12/07 1:59 a.m.3 views

CVE-2024-11436

creationtimestamp| type| source ---|---|--- 2024-12-07 01:59:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113609066944566850 2024-12-07 04:10:52+00:00| seen| https://t.me/cvedetector/12310...

6.1CVSS8.7AI score0.01989EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/12/07 1:45 a.m.12 views

CVE-2024-11436 Drag & Drop Builder, Human Face Detector, Pre-built Templates, Spam Protection, User Email Notifications & more! <= 1.4.19 - Reflected Cross-Site Scripting

The Drag & Drop Builder, Human Face Detector, Pre-built Templates, Spam Protection, User Email Notifications & more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.4.19 due to insufficient input sanitization an...

6.1CVSS0.01989EPSS
Exploits0References2
CVE
CVE
added 2018/05/30 1:0 p.m.31 views

CVE-2018-11436

CVE-2018-11436 affects Libmobi version 0.3. The vulnerability is in the buffer_addraw function of buffer.c, enabling a remote attacker to disclose information via a crafted MOBI file due to a heap-based over-read. The exploitation vector and impact are described as information disclosure; no in-w...

6.5CVSS6.2AI score0.00308EPSS
Exploits1References1Affected Software1
Debian CVE
Debian CVE
added 2018/05/30 1:0 p.m.16 views

CVE-2018-11436

The bufferaddraw function in buffer.c in Libmobi 0.3 allows remote attackers to cause information disclosure heap-based buffer over-read via a crafted mobi file...

6.5CVSS6.4AI score0.00308EPSS
Exploits1
OSV
OSV
added 2017/07/19 7:29 a.m.1 views

CVE-2017-11436

D-Link DIR-615 before v20.12PTb04 has a second admin account with a 0x1 BACKDOOR value, which might allow remote attackers to obtain access via a TELNET connection...

9.8CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2017/07/19 7:29 a.m.11 views

CVE-2017-11436

D-Link DIR-615 before v20.12PTb04 has a second admin account with a 0x1 BACKDOOR value, which might allow remote attackers to obtain access via a TELNET connection...

9.8CVSS9.3AI score0.01094EPSS
Exploits0References2
CVE
CVE
added 2017/07/19 7:0 a.m.46 views

CVE-2017-11436

CVE-2017-11436 affects the D-Link DIR-615 router (pre-20.12PTb04) with a second admin account containing a 0x1 BACKDOOR value, which could allow remote attackers to gain administrator access via TELNET. The vulnerability is documented across multiple sources (NVD/CNVD) with impact described as re...

9.8CVSS9.2AI score0.01094EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder