91 matches found
EUVD-2008-5839
Malware in sbrugna...
CVE-2021-2411
Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: JS module. Supported versions that are affected are 8.0.25 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Cluster. Successfu...
Citrix policies filtered by Client IP address not applying after 2411
Citrix policies are applied using as filter IP address of the client The IP addresses defined are the ones of the endpoints who has Citrix Workspace App installed The policy worked correctly before upgrading VDA to version 2411 However, when the VDA is upgraded to version 2411 or newer, the...
CVE-2011-2411 vulnerabilities
Vulnerabilities for packages: samba...
CVE-2011-2411 vulnerabilities
Vulnerabilities for packages: samba...
Ubuntu 24.04 VDA 2411 - "Invalid Login" with FAS Enabled
Users on Ubuntu 24.04 with Citrix VDA 2411 and Federated Authentication Service FAS enabled experience "Invalid Login" errors during login attempts...
CVE-2025-26331
Dell ThinOS 2411 and prior, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution...
CVE-2024-2411
creationtimestamp| type| source ---|---|--- 2025-02-14 10:08:11+00:00| seen| Telegram/O3u7Xl4Z1pChc8yD0WP7zeDowL4Ft-s2-d0cGtcWdFjWQfFf...
CVE-2024-2411
The MasterStudy LMS plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.0 via the 'modal' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code i...
WordPress Table of Contents Plus plugin <= 2411 - Editor+ Stored XSS vulnerability
Editor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Table of Contents Plus versions = 2411...
WordPress MasterStudy LMS Plugin <= 3.3.0 is vulnerable to Local File Inclusion
Software MasterStudy LMS Type Plugin Vulnerable versions = 3.3.0 Fixed in 3.3.1 OWASP Top 10 A1: Injection Classification Local File Inclusion CVE CVE-2024-2411 Patch priority High CVSS severity High 9 Developer Claim ownership PSID c509d4c43d0b Credits Hiroho Shimada Required privilege...
CVE-2024-2411
The MasterStudy LMS plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.0 via the 'modal' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code i...
Amazon Linux 2 : xmlgraphics-commons (ALAS-2024-2411)
The version of xmlgraphics-commons installed on the remote host is prior to 1.5-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2411 advisory. Apache XmlGraphics Commons 2.4 and earlier is vulnerable to server-side request forgery, caused by improper input...
CVE-2023-2411
CVE-2023-2411 affects SourceCodester AC Repair and Services System 1.0. The issue is a SQL injection in the /admin/inquiries/view_inquiry.php endpoint caused by improper handling of the id parameter. This allows remote exploitation and has been publicly disclosed. Affected software is Version 1.0...
CVE-2023-2411 SourceCodester AC Repair and Services System view_inquiry.php sql injection
A vulnerability was found in SourceCodester AC Repair and Services System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/inquiries/viewinquiry.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...
CVE-2022-2411
The Auto More Tag WordPress plugin through 4.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2022-2411 Auto More Tag <= 4.0.0 - Admin+ Stored Cross-Site Scripting
The Auto More Tag WordPress plugin through 4.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2022-2411
CVE-2022-2411 affects the Auto More Tag WordPress plugin (versions prior to 4.0.1). The issue arises from insufficient sanitization/escaping of some settings, enabling Stored Cross-Site Scripting by high-privilege users (e.g., admins) when unfiltered_html is disallowed (notably in multisite). Imp...
openSUSE: Security Advisory for the (SUSE-SU-2022:2411-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2021-2411
CVE-2021-2411 affects Oracle MySQL Cluster (Cluster: JS module) with affected versions 8.0.25 and earlier. The vulnerability is exploitable by an unauthenticated attacker over network via multiple protocols, leading to partial denial of service of MySQL Cluster. The connected sources confirm the ...