14 matches found
CVE-2025-11904
A vulnerability has been found in yanyutao0402 ChanCMS up to 3.3.2. This affects the function hasUse of the file /cms/model/hasUse. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The...
CVE-2020-11904
creationtimestamp| type| source ---|---|--- 2025-09-30 14:59:40+00:00| seen| Telegram/AUbnxlCSLTExRPEDr5R7V61TtRdp7ZVRuwe7GA7pZTKC1A...
CVE-2024-11904
The 코드엠샵 소셜톡 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'msnttaddplustalk' shortcode in all versions up to, and including, 1.2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2024-11904
creationtimestamp| type| source ---|---|--- 2024-12-07 02:14:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113609125955564886 2024-12-07 04:10:44+00:00| seen| https://t.me/cvedetector/12303...
CVE-2024-11904 코드엠샵 소셜톡 <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
The 코드엠샵 소셜톡 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'msnttaddplustalk' shortcode in all versions up to, and including, 1.2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2024-11904
CVE-2024-11904 : The WordPress plugin 코드엠샵 소셜톡 (mshop-naver-talktalk) ≤ 1.2.0 suffers a Stored Cross-Site Scripting vulnerability via the shortcode msntt_add_plus_talk due to insufficient input sanitization and output escaping. Authenticated attackers with at least contributor access can inject s...
ArubaOS-Switch Ripple20 Multiple Vulnerabilities (ARUBA-PSA-2020-006)
The version of ArubaOS-Switch installed on the remote host is affected by multiple vulnerabilities in the Treck IP stack implementation. The vulnerabilities are collectively known as Ripple20, and can result in remote code execution, denial of service DoS, and information disclosure by remote,...
Ripple20: Multiple Vulnerabilities Identified in Treck TCP/IP Stack
Multiple vulnerabilities that use a low-level TCP/IP software library developed by Treck, Inc. were identified recently in implementations of the Treck IP stack for embedded systems. These vulnerabilities were discovered by the JSOF research lab and have been named Ripple20. Ripple20...
CVE-2020-11904
The Treck TCP/IP stack before 6.0.1.66 has an Integer Overflow during Memory Allocation that causes an Out-of-Bounds Write...
CVE-2020-11904
The Treck TCP/IP stack before 6.0.1.66 has an Integer Overflow during Memory Allocation that causes an Out-of-Bounds Write...
CVE-2020-11904
The CVE refers to Treck TCP/IP stack before 6.0.1.66, which has an Integer Overflow during Memory Allocation that causes an Out-of-Bounds Write (Ripple20 family). Connected documents corroborate multiple Treck vulnerabilities in the Ripple20 set and describe memory-management bugs that can enable...
CVE-2018-11904
CVE-2018-11904 is a null pointer dereference vulnerability in the Android WLAN stack (CAF/Linux kernel) where asynchronous callbacks may dereference a caller’s local pointer if the caller times out. This enables a local attacker to cause a denial of service. Public connected documents corroborate...
Fedora Update for autotrace FEDORA-2013-11904
Check for the Version of autotrace OpenVAS Vulnerability Test Fedora Update for autotrace FEDORA-2013-11904 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
Fedora Update for autotrace FEDORA-2013-11904
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...