Lucene search
K

15 matches found

Circl
Circl
added 2025/03/26 6:25 a.m.0 views

CVE-2024-11847

creationtimestamp| type| source ---|---|--- 2025-03-26 06:25:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8809 2025-03-26 09:42:18+00:00| seen| https://t.me/cvedetector/21150...

4.8CVSS8.7AI score0.00083EPSS
Exploits1References2
NVD
NVD
added 2025/03/26 6:15 a.m.9 views

CVE-2024-11847

The wp-svg-upload WordPress plugin through 1.0.0 does not sanitize SVG file contents, which enables users with at least the author role to SVG with malicious JavaScript to conduct Stored XSS attacks...

4.8CVSS0.00083EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/03/26 6:0 a.m.8 views

CVE-2024-11847 WP SVG Upload <= 1.0.0 - Author+ Stored XSS via SVG

The wp-svg-upload WordPress plugin through 1.0.0 does not sanitize SVG file contents, which enables users with at least the author role to SVG with malicious JavaScript to conduct Stored XSS attacks...

0.00083EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 2:13 p.m.6 views

CVE-2020-11847

SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1...

8.2CVSS7.2AI score0.00175EPSS
Exploits0References1
Circl
Circl
added 2024/08/21 4:34 p.m.0 views

CVE-2020-11847

creationtimestamp| type| source ---|---|--- 2024-08-21 16:34:22+00:00| seen| https://t.me/cvedetector/3770...

8.2CVSS4.8AI score0.00175EPSS
Exploits0References1
NVD
NVD
added 2024/08/21 2:15 p.m.19 views

CVE-2020-11847

SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1...

8.2CVSS0.00175EPSS
Exploits0References1
OSV
OSV
added 2024/08/21 2:15 p.m.3 views

CVE-2020-11847

SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1...

7.8CVSS5.8AI score0.00175EPSS
Exploits0References1
CVE
CVE
added 2024/08/21 1:38 p.m.45 views

CVE-2020-11847

CVE-2020-11847 affects OpenText NetIQ Privileged Account Manager (PAM) prior to 3.7.0.1. An SSH-authenticated user can access the PAM server and run an OS command via bash to obtain full system access. The root cause is exposure of command execution during SSH access to the PAM server, as describ...

8.2CVSS8.5AI score0.00175EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/08/21 1:38 p.m.12 views

CVE-2020-11847 Vulnerability in sshrelay in privileged access manager provides full system access.

SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1...

8.2CVSS7.3AI score0.00175EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/08/21 1:38 p.m.17 views

CVE-2020-11847 Vulnerability in sshrelay in privileged access manager provides full system access.

SSH authenticated user when access the PAM server can execute an OS command to gain the full system access using bash. This issue affects Privileged Access Manager before 3.7.0.1...

8.2CVSS0.00175EPSS
Exploits0References1
NVD
NVD
added 2020/08/21 7:15 p.m.8 views

CVE-2019-11847

An improper privilege management vulnerabitlity exists in ALEOS before 4.11.0, 4.9.4 and 4.4.9. An authenticated user can escalate to root via the command shell...

7.8CVSS7.5AI score0.00008EPSS
Exploits0References1
Cvelist
Cvelist
added 2020/08/21 6:40 p.m.12 views

CVE-2019-11847 ALEOS User Root Shell Escalation

An improper privilege management vulnerabitlity exists in ALEOS before 4.11.0, 4.9.4 and 4.4.9. An authenticated user can escalate to root via the command shell...

7.3CVSS7.8AI score0.00008EPSS
Exploits0References1
CVE
CVE
added 2020/08/21 6:40 p.m.53 views

CVE-2019-11847

CVE-2019-11847 describes a privilege management flaw in ALEOS prior to 4.11.0, 4.9.4, and 4.4.9. An authenticated user can escalate to root via the command shell due to mismanagement of privileges. Affected product context refers to ALEOS (embedded M2M/IDE environment). The available sources stat...

7.8CVSS7.5AI score0.00008EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2019/02/11 3:0 p.m.19 views

CVE-2018-11847

Malicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory as well it can be used to corrupt the QSEE kernel and compromise the whole TEE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon...

7.4AI score0.00033EPSS
Exploits0References2
CVE
CVE
added 2019/02/11 3:0 p.m.55 views

CVE-2018-11847

CVE-2018-11847: A vulnerability where a malicious TA can tag QSEE kernel memory and map it into EL0, enabling corruption of physical memory and the QSEE kernel, effectively compromising the entire TEE. Affected platforms include Snapdragon Auto, Compute, Connectivity, Consumer Electronics Connect...

7.8CVSS6.1AI score0.00033EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder