MSC-2026-11880

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

GHSA-6F82-HFHW-X2GC vulnerabilities

Vulnerabilities for packages: linux-gcp...

CVE-2026-11880

creationtimestamp| type| source ---|---|--- 2026-07-01 10:06:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplbg73rr52h 2026-07-01 11:38:38+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplgkyekfd2p...

CVE-2026-11880

The Fluent Forms WordPress plugin before 6.2.1 does not properly verify ownership before processing a subscription cancellation request, allowing authenticated users with a low-privilege account to cancel subscriptions belonging to other users...

PT-2026-38422

Name of the Vulnerable Software and Affected Versions Fluent Forms WordPress plugin versions prior to 6.2.1 PAN-OS versions prior to 10.2.9-h1 PAN-OS versions prior to 11.0.4-h2 PAN-OS versions prior to 11.1.2-h3 Description Fluent Forms contains an issue where ownership is not properly verified...

WordPress SM CountDown Widget plugin <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Gilang - DJ in WordPress Plugin SM CountDown Widget versions = 1.2...

EUVD-2019-11880

Malware in sbrugna...

Ubuntu 18.04 LTS / 20.04 LTS : KMail vulnerabilities (USN-7731-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7731-1 advisory. Damian Poddebniak, Christian Dresen, Jens Mller, Fabian Ising, Sebastian Schinzel, Simon Friedberger, Juraj Somorovsky, and Jrg Schwenk...

Linux Distros Unpatched Vulnerability : CVE-2020-11880

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in KDE KMail before 19.12.3. By using the proprietary non-RFC6068 mailto?attach=... parameter, a website or other source of mailto links...

CVE-2024-11880

The B Testimonial – testimonial plugin for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'btestimonial' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...

CVE-2024-11880

creationtimestamp| type| source ---|---|--- 2024-12-04 08:35:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113593635878848341 2024-12-04 10:53:59+00:00| seen| https://t.me/cvedetector/11965...

CVE-2024-11880 B Testimonial – testimonial plugin for WP <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

The B Testimonial – testimonial plugin for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'btestimonial' shortcode in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...

SUSE CVE-2020-11880

An issue was discovered in KDE KMail before 19.12.3. By using the proprietary non-RFC6068 "mailto?attach=..." parameter, a website or other source of mailto links can make KMail attach local files to a composed email message without showing a warning to the user, as demonstrated by an...

UBUNTU-CVE-2020-11880

An issue was discovered in KDE KMail before 19.12.3. By using the proprietary non-RFC6068 "mailto?attach=..." parameter, a website or other source of mailto links can make KMail attach local files to a composed email message without showing a warning to the user, as demonstrated by an...

CVE-2020-11880

CVE-2020-11880 affects KDE KMail prior to 19.12.3. A non-RFC6068 mailto?attach=… parameter lets a website or mailto link cause KMail to attach local files to a composed message without warning (demonstrated by attach=.bash_history). The vulnerability arises from how KMail handles the proprietary ...

CVE-2020-11880

An issue was discovered in KDE KMail before 19.12.3. By using the proprietary non-RFC6068 "mailto?attach=..." parameter, a website or other source of mailto links can make KMail attach local files to a composed email message without showing a warning to the user, as demonstrated by an...

CVE-2019-11880

creationtimestamp| type| source ---|---|--- 2019-05-22 16:48:17+00:00| seen| https://t.me/cvemitreorg/129...

CVE-2019-11880

CommSy through 8.6.5 has SQL Injection via the cid parameter. This is fixed in 9.2...

CVE-2019-11880

CVE-2019-11880 affects CommSy

CommSy 8.6.5 - SQL injection

CommSy 8.6.5 - SQL injection Title: ====== CommSy 8.6.5 - SQL injection Researcher: =========== Jens Regel, Schneider & Wulf EDV-Beratung GmbH & Co. KG CVE-ID: ======= CVE-2019-11880 Timeline: ========= 2019-04-15 Vulnerability discovered 2019-04-15 Asked for security contact and PGP key 2019-04-...