Lucene search
K

14 matches found

Circl
Circl
added 2025/11/25 9:10 a.m.1 views

CVE-2025-13311

creationtimestamp| type| source ---|---|--- 2025-11-25 09:10:33+00:00| seen| https://gist.github.com/Darkcrai86/6483c18e8b5144863fe800a242d4a657...

4.4CVSS5.8AI score0.00022EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/01/09 8:28 p.m.6 views

CVE-2024-13311 Allow All File Extensions for file fields - Critical - Unsupported - SA-CONTRIB-2024-075

Vulnerability in Drupal Allow All File Extensions for file fields.This issue affects Allow All File Extensions for file fields:...

7.2AI score0.00339EPSS
Exploits0References1
Circl
Circl
added 2024/11/15 9:47 p.m.6 views

CVE-2017-13311

creationtimestamp| type| source ---|---|--- 2024-11-15 21:47:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113489167507386471 2024-11-16 00:10:02+00:00| seen| https://t.me/cvedetector/11195...

7.8CVSS7.5AI score0.00006EPSS
Exploits0References2
Cvelist
Cvelist
added 2021/06/15 7:11 p.m.15 views

CVE-2021-31497

This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS8AI score0.00345EPSS
Exploits0References1
CVE
CVE
added 2021/06/15 7:11 p.m.63 views

CVE-2021-31497

OpenText Brava! Desktop 16.6.3.84 is affected by CVE-2021-31497 through a DWG file parsing flaw. The vulnerability arises from failure to validate the existence of an object before operations, enabling arbitrary code execution in the process context. User interaction is required (visiting a malic...

7.8CVSS7.8AI score0.00345EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2020/09/14 7:47 p.m.74 views

CVE-2020-13311

CVE-2020-13311 affects GitLab versions prior to 13.1.10, 13.2.8, and 13.3.4, where the Wiki parser can be attacked, preventing access to Wiki functionality via the UI. The issue is defined as a Wiki parser attack that blocks UI access, with reported CVSS metrics (v2: 4.0 MEDIUM; v3.1: 4.3 MEDIUM)...

4.3CVSS4.4AI score0.00249EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2020/07/31 12:0 a.m.23 views

Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2020-1806)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.9AI score0.02095EPSS
Exploits18References2
Circl
Circl
added 2019/07/05 4:0 a.m.1 views

CVE-2019-13311

creationtimestamp| type| source ---|---|--- 2019-07-05 04:00:14+00:00| seen| https://t.me/cveNotify/233...

6.5CVSS6.7AI score0.00196EPSS
Exploits1References1
OSV
OSV
added 2019/07/05 1:15 a.m.1 views

ALPINE-CVE-2019-13311

ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of a wand/mogrify.c error...

6.5CVSS6.9AI score0.00196EPSS
Exploits1References1
OSV
OSV
added 2019/07/05 1:15 a.m.20 views

CVE-2019-13311

ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of a wand/mogrify.c error...

6.5CVSS2.4AI score
Exploits0References6
OSV
OSV
added 2019/07/05 1:15 a.m.0 views

DEBIAN-CVE-2019-13311

ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of a wand/mogrify.c error...

6.5CVSS6.8AI score0.00196EPSS
Exploits1References1
CVE
CVE
added 2019/07/05 12:54 a.m.325 views

CVE-2019-13311

CVE-2019-13311 is a memory-leak vulnerability in ImageMagick 7.0.8-50 Q16 and earlier, caused by memory not being released in AcquireMagickMemory during MogrifyImageList/MagickWand wand/mogrify.c error paths. Exploitation can lead to Denial of Service via memory exhaustion when processing crafted...

6.5CVSS7.1AI score0.00196EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2018/11/26 10:0 p.m.19 views

CVE-2018-13311

System command injection in formDlna in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "sambaUser" POST parameter...

9.9AI score0.06475EPSS
Exploits0References1
CVE
CVE
added 2018/11/26 10:0 p.m.40 views

CVE-2018-13311

CVE-2018-13311 affects TOTOLINK A3002RU (firmware v1.0.8) in the formDlna component. An attacker can inject system commands via the sambaUser POST parameter, enabling remote code execution. Public references from NVD/CNVD describe a system command injection vulnerability with high severities (CVS...

10CVSS9.8AI score0.06475EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder