Lucene search
K

14 matches found

NVD
NVD
added 2025/10/17 3:15 p.m.5 views

CVE-2025-11904

A vulnerability has been found in yanyutao0402 ChanCMS up to 3.3.2. This affects the function hasUse of the file /cms/model/hasUse. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The...

7.2CVSS0.00011EPSS
Exploits1References5
Circl
Circl
added 2025/09/30 2:59 p.m.3 views

CVE-2020-11904

creationtimestamp| type| source ---|---|--- 2025-09-30 14:59:40+00:00| seen| Telegram/AUbnxlCSLTExRPEDr5R7V61TtRdp7ZVRuwe7GA7pZTKC1A...

7.5CVSS7.2AI score0.03445EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/23 7:5 a.m.3 views

CVE-2024-11904

The 코드엠샵 소셜톡 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'msnttaddplustalk' shortcode in all versions up to, and including, 1.2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.8AI score0.0031EPSS
Exploits0References1
Circl
Circl
added 2024/12/07 2:14 a.m.4 views

CVE-2024-11904

creationtimestamp| type| source ---|---|--- 2024-12-07 02:14:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113609125955564886 2024-12-07 04:10:44+00:00| seen| https://t.me/cvedetector/12303...

6.4CVSS8.7AI score0.0031EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/12/07 1:45 a.m.8 views

CVE-2024-11904 코드엠샵 소셜톡 <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The 코드엠샵 소셜톡 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'msnttaddplustalk' shortcode in all versions up to, and including, 1.2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.8AI score0.0031EPSS
Exploits0References2
CVE
CVE
added 2024/12/07 1:45 a.m.37 views

CVE-2024-11904

CVE-2024-11904 : The WordPress plugin 코드엠샵 소셜톡 (mshop-naver-talktalk) ≤ 1.2.0 suffers a Stored Cross-Site Scripting vulnerability via the shortcode msntt_add_plus_talk due to insufficient input sanitization and output escaping. Authenticated attackers with at least contributor access can inject s...

6.4CVSS5.7AI score0.0031EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2021/06/30 12:0 a.m.668 views

ArubaOS-Switch Ripple20 Multiple Vulnerabilities (ARUBA-PSA-2020-006)

The version of ArubaOS-Switch installed on the remote host is affected by multiple vulnerabilities in the Treck IP stack implementation. The vulnerabilities are collectively known as Ripple20, and can result in remote code execution, denial of service DoS, and information disclosure by remote,...

10CVSS6.7AI score0.57967EPSS
Exploits20References20
Qualys Blog
Qualys Blog
added 2020/06/24 11:24 p.m.369 views

Ripple20: Multiple Vulnerabilities Identified in Treck TCP/IP Stack

Multiple vulnerabilities that use a low-level TCP/IP software library developed by Treck, Inc. were identified recently in implementations of the Treck IP stack for embedded systems. These vulnerabilities were discovered by the JSOF research lab and have been named Ripple20. Ripple20...

10CVSS1AI score0.57967EPSS
Exploits16
NVD
NVD
added 2020/06/17 11:15 a.m.18 views

CVE-2020-11904

The Treck TCP/IP stack before 6.0.1.66 has an Integer Overflow during Memory Allocation that causes an Out-of-Bounds Write...

7.5CVSS0.03445EPSS
Exploits1References9
Cvelist
Cvelist
added 2020/06/17 10:41 a.m.19 views

CVE-2020-11904

The Treck TCP/IP stack before 6.0.1.66 has an Integer Overflow during Memory Allocation that causes an Out-of-Bounds Write...

8.3AI score0.03445EPSS
Exploits1References9
CVE
CVE
added 2020/06/17 10:41 a.m.140 views

CVE-2020-11904

The CVE refers to Treck TCP/IP stack before 6.0.1.66, which has an Integer Overflow during Memory Allocation that causes an Out-of-Bounds Write (Ripple20 family). Connected documents corroborate multiple Treck vulnerabilities in the Ripple20 set and describe memory-management bugs that can enable...

7.5CVSS8.2AI score0.03445EPSS
In wildExploits1References9Affected Software1
CVE
CVE
added 2018/09/19 2:0 p.m.35 views

CVE-2018-11904

CVE-2018-11904 is a null pointer dereference vulnerability in the Android WLAN stack (CAF/Linux kernel) where asynchronous callbacks may dereference a caller’s local pointer if the caller times out. This enables a local attacker to cause a denial of service. Public connected documents corroborate...

7.8CVSS7.2AI score0.0005EPSS
Exploits0References52Affected Software1
OpenVAS
OpenVAS
added 2013/08/20 12:0 a.m.17 views

Fedora Update for autotrace FEDORA-2013-11904

Check for the Version of autotrace OpenVAS Vulnerability Test Fedora Update for autotrace FEDORA-2013-11904 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

6.8CVSS0.3AI score0.00347EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2013/08/20 12:0 a.m.14 views

Fedora Update for autotrace FEDORA-2013-11904

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.5AI score0.00347EPSS
Exploits0References2
Rows per page
Query Builder