21 matches found
CVE-2026-11992
creationtimestamp| type| source ---|---|--- 2026-07-10 21:05:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqd2hn2jul2d 2026-07-10 21:05:55+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mqd2ho65xv2o...
CVE-2026-11992 Easy Appointments <= 3.12.27 - Missing Authorization to Authenticated (Author+) Bulk Appointment Manipulation
The Easy Appointments plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.12.27. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with author-level...
CVE-2025-11992
creationtimestamp| type| source ---|---|--- 2025-10-24 09:20:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3wkcblnjq2f...
WordPress Multi Item Responsive Slider plugin <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability
Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Multi Item Responsive Slider versions = 1.0...
RockyLinux 9 : sqlite (RLSA-2025:11992)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:11992 advisory. sqlite: Integer Truncation in SQLite CVE-2025-6965 Tenable has extracted the preceding description block directly from the RockyLinux security advisory. Note tha...
EUVD-2025-11992
Malicious code in bioql PyPI...
Oracle Linux 9 : sqlite (ELSA-2025-11992)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-11992 advisory. 3.34.1-8 - Fixes CVE-2025-6965 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...
CVE-2024-11992
creationtimestamp| type| source ---|---|--- 2024-11-29 13:13:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113566418754817380...
CVE-2024-11992 Path traversal vulnerability in Quick.CMS
Absolute path traversal vulnerability in Quick.CMS, version 6.7, the exploitation of which could allow remote users to bypass the intended restrictions and download any file if it has the appropriate permissions outside of documentroot configured on the server via the aDirFiles%5B0%5D parameter i...
CVE-2024-11992 Path traversal vulnerability in Quick.CMS
Absolute path traversal vulnerability in Quick.CMS, version 6.7, the exploitation of which could allow remote users to bypass the intended restrictions and download any file if it has the appropriate permissions outside of documentroot configured on the server via the aDirFiles%5B0%5D parameter i...
CVE-2019-11992
creationtimestamp| type| source ---|---|--- 2024-03-15 07:41:33+00:00| seen| https://t.me/ctinow/208471...
CVE-2018-11992
CVE-2018-11992 is a rejected/not used CVE entry as stated in the Initial Description.
CVE-2020-26995
A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing of SGI and RGB files. This could result in an out of bounds write past the end of an allocated structur...
Default credentials
A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing of SGI and RGB files. This could result in an out of bounds write past the end of an allocated structur...
CVE-2020-26995
CVE-2020-26995 affects Siemens JT2Go and Teamcenter Visualization prior to 13.1.0. The issue is an out-of-bounds write caused by improper validation while parsing SGI and RGB files, which can enable remote code execution in the context of the impacted process. Exploitation details are described i...
CVE-2020-11992
This CVE entry is rejected and not used; it does not represent an active vulnerability.
CVE-2019-11992
CVE-2019-11992 concerns HPE OneView for VMware vCenter 9.5, where a remote attacker can trigger a Cross-Site Scripting vulnerability due to lack of proper input validation in the WEB application. Red Hat and CNVD entries reiterate the same issue and specify the impact as client-side code executio...
HPESBGN03957 rev.1 - HPE Oneview for VMware vCenter, Remote Cross-Site Scripting
Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView for VMware vCenter with Operations Manager and Log Insight 9.5 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2019-11992 |...