CVE-2019-2618

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2018-2618 vulnerabilities

Vulnerabilities for packages: openjdk-25-openj9, openjdk-11-openj9, openjdk-26-openj9, openjdk-17-openj9, openjdk-21-openj9, openjdk-8-openj9...

TencentOS Server 4: opencv (TSSA-2024:0353)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0353 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

CVE-2011-2618

Opera before 11.50 allows remote attackers to cause a denial of service application crash via web script that moves a 1 AUDIO element or 2 VIDEO element between windows...

CVE-2025-2618

creationtimestamp| type| source ---|---|--- 2025-03-22 14:40:12+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkxxgn4y5n2v 2025-03-22 14:48:42+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114206632948653692 2025-03-22 15:00:26+00:00|...

Ubuntu 18.04 LTS / 22.04 LTS : OpenCV vulnerabilities (USN-7247-1)

The remote Ubuntu 18.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7247-1 advisory. It was discovered that OpenCV did not properly manage certain XML data, leading to a NULL pointer dereference. If a user were tricked into...

CVE-2024-2618

creationtimestamp| type| source ---|---|--- 2025-02-01 17:28:09+00:00| seen| Telegram/Eu6VMxSwSs0acCj5GlaC6jUjWjG7sUEhGKl8uFKXMKzS-2d-...

Amazon Linux 2 : nerdctl (ALAS-2024-2618)

The version of nerdctl installed on the remote host is prior to 1.7.6-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2618 advisory. 2024-08-28: CVE-2024-24790 was added to this advisory. A malicious HTTP sender can use chunk extensions to cause a receive...

CVE-2019-2618

creationtimestamp| type| source ---|---|--- 2024-07-18 16:40:25+00:00| published-proof-of-concept| https://t.me/CNArsenal/2807 2024-07-18 20:18:18+00:00| published-proof-of-concept| https://t.me/realLulzSec/13943 2024-07-18 20:18:18+00:00| published-proof-of-concept| https://t.me/realLulzSec/1317...

CVE-2024-2618 Elementor Header & Footer Builder <= 1.6.26 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the size attribute in all versions up to, and including, 1.6.26 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-2618 Elementor Header & Footer Builder <= 1.6.26 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the size attribute in all versions up to, and including, 1.6.26 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-2618

CVE-2024-2618 refers to the Elementor Header & Footer Builder plugin for WordPress. The Red Hat and WordPress‑centered sources confirm a Stored Cross‑Site Scripting vulnerability via the size attribute in all versions up to and including 1.6.26, caused by insufficient input sanitization and outpu...

WordPress Elementor – Header, Footer & Blocks Template Plugin <= 1.6.26 is vulnerable to Cross Site Scripting (XSS)

Software Elementor – Header, Footer & Blocks Template Type Plugin Vulnerable versions = 1.6.26 Fixed in 1.6.26.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2618 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 15122274e1c0...

CVE-2023-2618

creationtimestamp| type| source ---|---|--- 2024-02-08 09:11:53+00:00| seen| https://t.me/ctinow/181233 2024-02-08 14:11:22+00:00| seen| https://t.me/ctinow/181380...

Oracle Application Testing Suite DoS (January 2024 CPU)

The version of Oracle Application Testing Suite installed on the remote host is affected by a denial of service vulnerability as referenced in the January 2024 CPU advisory: - Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager component: Load Testing for We...

Oracle Linux 7 : ELSA-2017-0933-1: / kernel (ELSA-2017-09331)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-09331 advisory. - The mpipowm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure that memory is allocated for limb data, which allows...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect IBM Tivoli Netcool Configuration Manager (ITNCM)

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 6, 7, 8 and IBM® Runtime Environment Java™ Technology Edition, Versions 6, 7, 8 used by IBM Tivoli Netcool Configuration Manager. These issues were disclosed as part of the IBM Java SDK updates in January...

SUSE CVE-2023-2618

A vulnerability, which was classified as problematic, has been found in OpenCV wechatqrcode Module up to 4.7.0. Affected by this issue is the function DecodedBitStreamParser::decodeHanziSegment of the file qrcode/decoder/decodedbitstreamparser.cpp. The manipulation leads to memory leak. The attac...

SUSE CVE-2011-2618

Opera before 11.50 allows remote attackers to cause a denial of service application crash via web script that moves a 1 AUDIO element or 2 VIDEO element between windows...

Fedora: Security Advisory for chromium (FEDORA-2022-3f28aa88cf)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...