127 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000566)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000566 advisory. Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...
CVE-2026-1851
The iVysilani Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width' shortcode attribute in all versions up to, and including, 3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
EUVD-2019-6369
Malware in sbrugna...
EUVD-2013-4684
Malware in sbrugna...
EUVD-2019-6353
Malware in sbrugna...
CVE-2024-1851
The affiliate-toolkit – WordPress Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the atkpcreatelist function in all versions up to, and including, 3.5.4. This makes it possible for authenticated attackers, with subscriber-level acce...
CVE-2021-1851
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An application may be able to execute arbitrary code with kernel privileges...
CVE-2019-15368
The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify...
CVE-2019-15352
The Coolpad 1851 Android device with a build fingerprint of Coolpad/android/android:8.1.0/O11019/1534834761:userdebug/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify...
CVE-2011-1851
Stack-based buffer overflow in tftpserver.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a long mode field...
Linux Distros Unpatched Vulnerability : CVE-2022-1851
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. CVE-2022-1851 Note that Nessus relies on the presence of the package as reported by the vendor...
CVE-2025-1851
creationtimestamp| type| source ---|---|--- 2025-03-02 20:22:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114094699549921161 2025-03-03 05:29:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6147 2025-03-03 07:01:08+00:00| published-proof-of-concept|...
Huawei EulerOS: Security Advisory for dnsmasq (EulerOS-SA-2024-1851)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-1851
creationtimestamp| type| source ---|---|--- 2024-03-08 08:21:54+00:00| seen| https://t.me/ctinow/203130 2024-03-08 08:26:42+00:00| seen| https://t.me/ctinow/203138 2025-04-16 15:56:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12078...
CVE-2024-1851
CVE-2024-1851 affects the WordPress plugin “affiliate-toolkit – WordPress Affiliate Plugin.” The vulnerability is a broken access control due to a missing capability check in the function atkp_create_list(), present in all versions up to and including 3.5.4. This allows authenticated attackers wi...
WordPress affiliate-toolkit Plugin <= 3.5.4 is vulnerable to Broken Access Control
Software affiliate-toolkit Type Plugin Vulnerable versions = 3.5.4 Fixed in 3.5.5 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1851 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID 2242c759db29 Credits Lucio Sá Required...
Rocky Linux 8 : pki-core:10.6 (RLSA-2022:1851)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:1851 advisory. - A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server's RAM...
Amazon Linux AMI : gsl (ALAS-2023-1851)
The version of gsl installed on the remote host is prior to 1.13-4.4. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1851 advisory. A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL GNU Scientific Library, versions 2....
BELL-CVE-2022-1851 CVE-2022-1851 does not affect BellSoft software
Bulletin has no description...
EulerOS Virtualization 3.0.2.0 : vim (EulerOS-SA-2023-1736)
According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Out-of-bounds Read in vim/vim prior to 8.2. CVE-2022-0319 - Use After Free in GitHub repository vim/vim prior to 8.2. CVE-2022-0413,...