Lucene search
K

15 matches found

NVD
NVD
added 2026/02/24 3:16 a.m.8 views

CVE-2025-11848

A null pointer dereference vulnerability in the Wake-on-LAN CGI program of the Zyxel VMG3625-T50B firmware version through 5.50ABPM.9.6C0 and the Zyxel WX3100-T0 firmware versions through 5.50ABVL.4.8C0 could allow an authenticated attacker with administrator privileges to trigger a...

4.9CVSS0.01847EPSS
Exploits0References1
NVD
NVD
added 2025/01/15 12:15 p.m.8 views

CVE-2024-11848

The NitroPack plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'nitropackdismissnoticeforever' AJAX action in all versions up to, and including, 1.17.0. This makes it possible for authenticated attackers, with subscriber-level access...

8.1CVSS0.00646EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/01/15 11:24 a.m.4 views

CVE-2024-11848 NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update

The NitroPack plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'nitropackdismissnoticeforever' AJAX action in all versions up to, and including, 1.17.0. This makes it possible for authenticated attackers, with subscriber-level access...

8.1CVSS7.7AI score0.00646EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/01/15 11:24 a.m.14 views

CVE-2024-11848 NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update

The NitroPack plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'nitropackdismissnoticeforever' AJAX action in all versions up to, and including, 1.17.0. This makes it possible for authenticated attackers, with subscriber-level access...

8.1CVSS0.00646EPSS
Exploits0References2
CVE
CVE
added 2025/01/15 11:24 a.m.44 views

CVE-2024-11848

CVE-2024-11848 affects NitroPack – Caching & Speed Optimization for WordPress. The vulnerability is due to a missing capability check on the nitropack_dismiss_notice_forever AJAX action in NitroPack versions up to 1.17.0, enabling authenticated attackers with subscriber-level access and above to ...

8.1CVSS7.7AI score0.00646EPSS
Exploits0References2
Cvelist
Cvelist
added 2021/11/23 7:58 p.m.8 views

CVE-2018-11848

...

Exploits0
CVE
CVE
added 2021/11/23 7:58 p.m.23 views

CVE-2018-11848

CVE-2018-11848 is rejected; this CVE entry is not used.

7.3AI score
Exploits0
OSV
OSV
added 2020/08/21 7:15 p.m.2 views

CVE-2019-11848

An API abuse vulnerability exists in the AT command API of ALEOS before 4.13.0, 4.9.5, 4.4.9 due to lack of length checking when handling certain user-provided values...

7.2CVSS7.1AI score0.01086EPSS
Exploits0References1
CVE
CVE
added 2020/08/21 6:44 p.m.62 views

CVE-2019-11848

CVE-2019-11848 is an API abuse vulnerability in the ALEOS AT Command API. The issue arises from lack of length checking when handling certain user-supplied values, affecting ALEOS versions prior to 4.13.0, 4.9.5, and 4.4.9. The connected sources corroborate the affected component (AT Command API)...

7.2CVSS5.6AI score0.01086EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/08/21 6:44 p.m.18 views

CVE-2019-11848 ALEOS AT Command API Abuse

An API abuse vulnerability exists in the AT command API of ALEOS before 4.13.0, 4.9.5, 4.4.9 due to lack of length checking when handling certain user-provided values...

4.1CVSS7.1AI score0.01086EPSS
Exploits0References1
OSV
OSV
added 2020/08/19 3:15 p.m.1 views

CVE-2020-11848

Denial of service vulnerability on Micro Focus ArcSight Management Center. Affecting all versions prior to version 2.9.5. The vulnerability could cause the server to become unavailable, causing a denial of service...

7.5CVSS7.1AI score0.01044EPSS
Exploits0References1
CVE
CVE
added 2020/08/19 2:25 p.m.51 views

CVE-2020-11848

CVE-2020-11848 is a DoS vulnerability in Micro Focus ArcSight Management Center (ArcMC). Connected documents confirm affected software as ArcMC versions prior to 2.9.5, with the impact described as the server becoming unavailable (denial of service). The Red Hat and CNVD entries corroborate the s...

7.5CVSS7.3AI score0.01044EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2017/11/15 3:0 a.m.90 views

CVE-2017-11848

CVE-2017-11848 affects Internet Explorer in multiple Windows versions (Windows 7 SP1, Server 2008 SP2, 8.1/RT 8.1, Server 2012/R2, Windows 10 variants, and Windows Server 2016+). The vulnerability is an information-disclosure flaw caused by how IE handles page content, allowing an attacker to det...

4.3CVSS5.2AI score0.07046EPSS
Exploits0References3Affected Software1
The Hacker News
The Hacker News
added 2017/11/14 8:46 p.m.186 views

Patch Tuesday: Microsoft Releases Update to Fix 53 Vulnerabilities

It's Patch Tuesday—time to update your Windows devices. Microsoft has released a large batch of security updates as part of its November Patch Tuesday in order to fix a total of 53 new security vulnerabilities in various Windows products, 19 of which rated as critical, 31 important and 3 moderate...

9.3CVSS7.8AI score0.99945EPSS
Exploits48
OpenVAS
OpenVAS
added 2009/02/10 12:0 a.m.32 views

Fedora Core 10 FEDORA-2008-11848 (libcdaudio)

The remote host is missing an update to libcdaudio announced via advisory FEDORA-2008-11848. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

7.5CVSS6.3AI score0.04621EPSS
Exploits0References2
Rows per page
Query Builder