23 matches found
CVE-2025-11851
creationtimestamp| type| source ---|---|--- 2026-03-10 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-01...
CVE-2019-11851
The ACENet service in Sierra Wireless ALEOS before 4.4.9, 4.5.x through 4.9.x before 4.9.5, and 4.10.x through 4.13.x before 4.14.0 allows remote attackers to execute arbitrary code via a buffer overflow...
CVE-2025-11851
A vulnerability has been found in Apeman ID71 EN75.8.53.20. The affected element is an unknown function of the file /setalias.cgi. Such manipulation of the argument alias leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be...
AlmaLinux 8 : kernel-rt (ALSA-2025:11851)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:11851 advisory. kernel: wifi: iwlwifi: limit printed string from FW file CVE-2025-21905 kernel: sched/fair: Fix potential memory corruption in childcfsrqonlist...
CVE-2024-11851
The NitroPack plugin for WordPress is vulnerable to unauthorized arbitrary transient update due to a missing capability check on the nitropackrmlnotification function in all versions up to, and including, 1.17.0. This makes it possible for authenticated attackers, with subscriber access or higher...
CVE-2024-11851 NitroPack <= 1.17.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Transient Update
The NitroPack plugin for WordPress is vulnerable to unauthorized arbitrary transient update due to a missing capability check on the nitropackrmlnotification function in all versions up to, and including, 1.17.0. This makes it possible for authenticated attackers, with subscriber access or higher...
CVE-2024-11851
CVE-2024-11851 affects the NitroPack WordPress plugin (versions ≤ 1.17.0). An authenticated attacker with subscriber+ privileges can update arbitrary transients due to a missing capability check in nitropack_rml_notification, with transients limited to integers. Connected sources (Patchstack/Red ...
CVE-2019-11851
creationtimestamp| type| source ---|---|--- 2022-12-27 00:41:10+00:00| seen| https://t.me/cibsecurity/55380...
CVE-2019-11851
The affected product is Sierra Wireless ALEOS, specifically the ACENet service. Affected ranges: before 4.4.9; 4.5.x through 4.9.x before 4.9.5; and 4.10.x through 4.13.x before 4.14.0. Root cause is a buffer overflow in ACENet that allows remote code execution. Exploitation status is not provide...
CVE-2019-11851
The ACENet service in Sierra Wireless ALEOS before 4.4.9, 4.5.x through 4.9.x before 4.9.5, and 4.10.x through 4.13.x before 4.14.0 allows remote attackers to execute arbitrary code via a buffer overflow...
CVE-2021-27239
The CVE-2021-27239 issue affects NETGEAR R6400 and R6700 routers with firmware 1.0.4.98. The flaw resides in the upnpd service, which listens on UDP port 1900; a crafted MX header in an SSDP message can overflow a fixed-length stack-based buffer, allowing network-adjacent attackers to execute arb...
CVE-2021-27239
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the upnpd service, which listens on...
Micro Focus ArcSight Logger Remote Code Execution (CVE-2020-11851)
A remote code execution vulnerability exists in Micro Focus ArcSight Logger. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Exploit for Code Injection in Microfocus Arcsight_Logger
CVE-2020-11851 Remote Code Execution vulnerability on ArcSig...
CVE-2020-11851
creationtimestamp| type| source ---|---|--- 2020-11-17 07:38:21+00:00| seen| https://t.me/cibsecurity/16417 2021-01-14 12:36:08+00:00| published-proof-of-concept| Telegram/g9Czzvvwo4GrketHVNn0AaDRZvTAJnLYcD15PFEbW5nnQw...
CVE-2020-11851
Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploited resulting in the execution of arbitrary code...
CVE-2020-11851
CVE-2020-11851 affects Micro Focus ArcSight Logger prior to 7.1.1. The connected documents confirm a remote code execution vulnerability in ArcSight Logger, exploitable via the ArcSight Management Center backup/config workflow that uses Tcl/expect scripts, leading to arbitrary code execution on v...
CVE-2018-11851
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, lack of check on input received to calculate the buffer length can lead to out of bound write to kernel stack...
CVE-2018-11851
CVE-2018-11851 relates to a buffer-length calculation input validation flaw in CAF Qualcomm WLAN driver components, causing a possible out-of-bounds write to kernel stack. The vulnerability is documented as a local, impactful issue with high severity (NVD CVSS v2/3 vectors indicate LOCAL access, ...
CVE-2017-11851
The Windows kernel component on Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709, allows an information disclosure vulnerability when it...