Lucene search
K

159 matches found

EUVD
EUVD
added 2026/01/07 3:24 p.m.2 views

EUVD-2026-1211

An attacker with access to the system's internal network can cause a denial of service on the system by making two concurrent connections through the Telnet service...

9.2CVSS6.2AI score0.00041EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-17668

Malware in sbrugna...

7.5CVSS7.8AI score0.00378EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2017-1211

Malware in sbrugna...

7.8CVSS7.8AI score0.00101EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 3:11 p.m.10 views

CVE-2020-1211

An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'...

7.8CVSS7AI score0.12134EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/22 3:7 a.m.6 views

CVE-2013-1211

Cisco NX-OS on the Nexus 1000V does not properly handle authentication for Virtual Ethernet Module VEM to Virtual Supervisor Module VSM communication, which allows remote attackers to obtain VEM access via 1 spoofed STUN packets or 2 a crafted VMware ESXi instance, aka Bug ID CSCud14832...

5CVSS7.2AI score0.00353EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:1 p.m.7 views

CVE-2009-1211

Blue Coat ProxySG, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote attackers to bypass access controls for Flash, Java, Silverlight, and probably other technologies, and possibly communicate with restricted intranet...

5.8CVSS7.1AI score0.00185EPSS
Exploits0References1
OSV
OSV
added 2025/02/11 5:15 a.m.2 views

CVE-2025-1211

Versions of the package hackney before 1.21.0 are vulnerable to Server-side Request Forgery SSRF due to improper parsing of URLs by URI built-in module and hackey. Given the URL http://[email protected]/, the URI function will parse and see the host as 127.0.0.1 which is correct, and hackney...

6.3CVSS6.8AI score
Exploits0References4
Circl
Circl
added 2025/02/11 5:5 a.m.4 views

CVE-2025-1211

creationtimestamp| type| source ---|---|--- 2025-02-11 05:05:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113983508330316842 2025-02-11 05:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuvpsipft27 2025-02-11 07:18:57+00:00| seen|...

6.5CVSS4.8AI score0.00034EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/02/11 5:0 a.m.10 views

CVE-2025-1211

Versions of the package hackney before 1.21.0 are vulnerable to Server-side Request Forgery SSRF due to improper parsing of URLs by URI built-in module and hackey. Given the URL http://[email protected]/, the URI function will parse and see the host as 127.0.0.1 which is correct, and hackney...

6.5CVSS0.00034EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/02/11 5:0 a.m.6 views

CVE-2025-1211

Versions of the package hackney before 1.21.0 are vulnerable to Server-side Request Forgery SSRF due to improper parsing of URLs by URI built-in module and hackey. Given the URL http://[email protected]/, the URI function will parse and see the host as 127.0.0.1 which is correct, and hackney...

6.5CVSS6.5AI score0.00034EPSS
Exploits0References4
CVE
CVE
added 2025/02/11 5:0 a.m.56 views

CVE-2025-1211

CVE-2025-1211 affects hackney releases before 1.21.0. The root cause is improper URL parsing by the URI module and hackey, leading to SSRF when a URL like http://[email protected]/ is parsed so that the host differs between the parsing function and hackney. This can enable an attacker to misro...

6.5CVSS6.5AI score0.00034EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/01/30 11:45 p.m.15 views

CVE-2024-1211 Cross-Site Request Forgery (CSRF) in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2 in which cross-site request forgery may have been possible on GitLab instances configured to use JWT as an OmniAut...

6.4CVSS6.3AI score0.00025EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/07/25 12:0 a.m.20 views

Cisco Nexus 1000V Insufficient VSM/VEM Authentication (CVE-2013-1211)

Cisco NX-OS on the Nexus 1000V does not properly handle authentication for Virtual Ethernet Module VEM to Virtual Supervisor Module VSM communication, which allows remote attackers to obtain VEM access via 1 spoofed STUN packets or 2 a crafted VMware ESXi instance, aka Bug ID CSCud14832. This...

5CVSS5.5AI score0.00353EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/03/14 12:0 a.m.35 views

RHEL 9 : lua (RHSA-2023:1211)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1211 advisory. The lua packages provide support for Lua, a powerful light-weight programming language designed for extending applications. Lua is also...

6.3CVSS6.8AI score0.00174EPSS
Exploits2References7
Circl
Circl
added 2023/03/07 2:13 a.m.1 views

CVE-2023-1211

creationtimestamp| type| source ---|---|--- 2023-03-07 02:13:15+00:00| seen| https://t.me/cibsecurity/59529 2025-03-06 19:38:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6729 2025-12-03 21:02:29+00:00| seen|...

7.2CVSS6.9AI score0.00313EPSS
Exploits3References3
CVE
CVE
added 2023/03/06 12:0 a.m.83 views

CVE-2023-1211

CVE-2023-1211 describes a SQL injection in phpIPAM (phpipam/phpipam) prior to version 1.5.2. Public references indicate the vulnerability resides in the admin area (for example, /app/admin/custom-fields/edit-result.php) and can be exploited via crafted POST data to perform arbitrary SQL commands ...

7.2CVSS7.3AI score0.00313EPSS
Exploits3References3Affected Software1
Circl
Circl
added 2022/08/08 2:22 a.m.1 views

CVE-2022-1211

creationtimestamp| type| source ---|---|--- 2022-08-08 02:22:10+00:00| seen| https://t.me/cibsecurity/40435...

6.5CVSS6.2AI score0.00312EPSS
Exploits1References1
CNVD
CNVD
added 2022/04/12 12:0 a.m.27 views

tildearrow Furnace Denial of Service Vulnerability

tildearrow Furnace is a multi-system chip tuning tracker compatible with the DefleMask module. tildearrow Furnace has a security vulnerability that stems from an incomplete fix for CVE-2022-1211, which can be exploited by attackers to cause a denial of service vulnerability...

6.5CVSS5.5AI score0.00312EPSS
Exploits2References1
OSV
OSV
added 2022/04/10 4:15 p.m.9 views

CVE-2022-1289

A denial of service vulnerability was found in tildearrow Furnace. It has been classified as problematic. This is due to an incomplete fix of CVE-2022-1211. It is possible to initiate the attack remotely but it requires user interaction. The issue got fixed with the patch...

6.5CVSS6.7AI score
Exploits0References3
NVD
NVD
added 2022/04/10 4:15 p.m.11 views

CVE-2022-1289

A denial of service vulnerability was found in tildearrow Furnace. It has been classified as problematic. This is due to an incomplete fix of CVE-2022-1211. It is possible to initiate the attack remotely but it requires user interaction. The issue got fixed with the patch...

6.5CVSS0.00312EPSS
Exploits1References3
Rows per page
Query Builder