Lucene search
+L

29 matches found

Circl
Circl
added 2026/07/28 12:16 p.m.8 views

CVE-2026-11841

creationtimestamp| type| source ---|---|--- 2026-07-28 12:16:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpfcaovmt2a 2026-07-28 15:26:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrppujw4pe2z...

9.4CVSS5.8AI score0.00458EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2019-11841

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A message-forgery issue was discovered in crypto/openpgp/clearsign/clearsign.go in supplementary Go cryptography libraries 2019-03-25. According to the OpenPGP...

5.9CVSS6.9AI score0.02002EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
added 2025/05/22 10:14 a.m.11 views

CVE-2019-11841

A message-forgery issue was discovered in crypto/openpgp/clearsign/clearsign.go in supplementary Go cryptography libraries 2019-03-25. According to the OpenPGP Message Format specification in RFC 4880 chapter 7, a cleartext signed message can contain one or more optional "Hash" Armor Headers. The...

5.9CVSS6.8AI score0.02002EPSS
SaveExploits2References1
OSV
OSV
added 2024/12/16 6:15 a.m.7 views

CVE-2024-11841

The Tithe.ly Giving Button WordPress plugin through 1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

5.4CVSS7.3AI score0.00297EPSS
SaveExploits1References1
CVE
CVE
added 2024/12/16 6:0 a.m.54 views

CVE-2024-11841

The CVE CVE-2024-11841 concerns the Tithe.ly Giving Button WordPress plugin (version up to 1.1) where shortcode attributes are not properly escaped/validated before output. This can enable Stored Cross-Site Scripting (XSS) attacks when a page or post embeds the shortcode and an attacker with Cont...

5.4CVSS5.6AI score0.00297EPSS
SaveExploits1References1Affected Software1
OpenVAS
OpenVAS
added 2023/06/19 12:0 a.m.25 views

Debian: Security Advisory (DLA-3455-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.9AI score0.21052EPSS
SaveExploits8References4
Debian
Debian
added 2023/06/16 9:31 p.m.77 views

[SECURITY] [DLA 3455-1] golang-go.crypto security update

Debian LTS Advisory DLA-3455-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany June 16, 2023 https://wiki.debian.org/LTS Package : golang-go.crypto Version : 1:0.0git20181203.505ab14-1+deb10u1 CVE ID : CVE-2019-11840 CVE-2019-11841 CVE-2020-9283 Debian Bug : 95246...

7.5CVSS7AI score0.21052EPSS
SaveExploits8
Tenable Nessus
Tenable Nessus
added 2023/06/16 12:0 a.m.43 views

Debian dla-3455 : golang-golang-x-crypto-dev - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3455 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3455-1 [email protected]...

7.5CVSS7.2AI score0.21052EPSS
SaveExploits8References8
CVE
CVE
added 2021/11/23 7:58 p.m.23 views

CVE-2018-11841

CVE-2018-11841 is rejected/not used and does not represent an active vulnerability entry.

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2020/10/08 12:0 a.m.28 views

Debian: Security Advisory (DLA-2402-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.9AI score0.21052EPSS
SaveExploits8References4
OSV
OSV
added 2020/06/16 2:15 p.m.6 views

CVE-2020-11841

Unauthorized information disclosure vulnerability in Micro Focus ArcSight Management Center product, Affecting versions 2.6.1, 2.7.x, 2.8.x, 2.9.x prior to 2.9.4. The vulnerabilities could be remotely exploited resulting unauthorized information disclosure...

4.3CVSS5.8AI score0.00681EPSS
SaveExploits0References1
CVE
CVE
added 2020/06/16 1:16 p.m.52 views

CVE-2020-11841

CVE-2020-11841 affects Micro Focus ArcSight Management Center (ArcMC) across versions 2.6.1, 2.7.x, 2.8.x, and 2.9.x prior to 2.9.4. The vulnerability is an unauthorized information disclosure that can be exploited remotely, with a network attack vector and low complexity; authentication is requi...

4.3CVSS4.4AI score0.00681EPSS
SaveExploits0References1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2019/08/13 9:2 p.m.24 views

Security Bulletin: API Connect V2018 is impacted by vulnerabilities in golang (CVE-2019-11841)

Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2019-11841 DESCRIPTION: Golang could allow a remote attacker to conduct spoofing attacks, caused by a flaw in the clearsign package of supplementary Go cryptography libraries. An attacker could...

5.9CVSS1.5AI score0.02002EPSS
SaveExploits2Affected Software1
Circl
Circl
added 2019/05/22 5:48 p.m.11 views

CVE-2019-11841

creationtimestamp| type| source ---|---|--- 2019-05-22 17:48:32+00:00| seen| https://t.me/cvemitreorg/133...

5.9CVSS6.9AI score0.02002EPSS
SaveExploits2References1
OSV
OSV
added 2019/05/22 5:29 p.m.14 views

CVE-2019-11841

A message-forgery issue was discovered in crypto/openpgp/clearsign/clearsign.go in supplementary Go cryptography libraries 2019-03-25. According to the OpenPGP Message Format specification in RFC 4880 chapter 7, a cleartext signed message can contain one or more optional "Hash" Armor Headers. The...

5.9CVSS5.9AI score
SaveExploits0References7
CVE
CVE
added 2019/05/22 12:0 a.m.382 views

CVE-2019-11841

CVE-2019-11841 concerns a Cleartext Signed Message Spoofing issue in the Clearsign component of supplementary Go cryptography libraries. The OpenPGP clearsign implementation ignores the Hash Armor Header, enabling spoofing of the digest algorithm and, because Armor Header parsing is skipped, allo...

5.9CVSS5.8AI score0.02002EPSS
SaveExploits2References7Affected Software1
Circl
Circl
added 2017/11/27 12:0 a.m.16 views

CVE-2017-11841

creationtimestamp| type| source ---|---|--- 2017-11-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43181...

7.6CVSS7.6AI score0.59642EPSS
SaveExploits4References1
zdt
zdt
added 2017/11/26 12:0 a.m.55 views

Microsoft Edge Chakra JIT Inline::InlineCallApplyTarget_Shared Failed Return Exploit

Exploit for windows platform in category dos / poc Microsoft Edge: Chakra: JIT: Inline::InlineCallApplyTargetShared doesn't return the return instruction CVE-2017-11841 Here's a snippet of Inline::Optimize. FOREACHINSTREDITINGinstr, instrNext, func-mheadInstr switch instr-mopcode case...

7.6CVSS7.5AI score0.59642EPSS
SaveExploits4
Packet Storm
Packet Storm
added 2017/11/25 12:0 a.m.38 views

Microsoft Edge Chakra JIT Inline::InlineCallApplyTarget_Shared Failed Return

Microsoft Edge: Chakra: JIT: Inline::InlineCallApplyTargetShared doesn't return the return instruction CVE-2017-11841 Here's a snippet of Inline::Optimize. FOREACHINSTREDITINGinstr, instrNext, func-mheadInstr switch instr-mopcode case Js::OpCode::Label: ... if instr-AsLabelInstr-misForInExit...

7.7AI score0.59642EPSS
SaveExploits4
Prion
Prion
added 2017/11/15 3:29 a.m.24 views

Memory corruption

ChakraCore and Microsoft Edge in Windows 10 1709 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from...

7.6CVSS7.3AI score0.69802EPSS
SaveExploits25References3
Rows per page
Query Builder