Lucene search
K

118 matches found

Chainguard
Chainguard
added 2025/08/08 1:17 p.m.7 views

CVE-2018-2811 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-21-openj9, openjdk-11-openj9, corretto, openjdk-17-openj9...

7.7CVSS6.3AI score0.00161EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 4:16 a.m.2 views

CVE-2023-41099

In the Windows installer in Atos Eviden CardOS API before 5.5.5.2811, Local Privilege Escalation can occur.from a regular user to SYSTEM...

7.8CVSS6.9AI score0.00044EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 3:35 a.m.6 views

CVE-2023-2811

The AI ChatBot WordPress plugin before 4.5.6 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks to all admin when setting chatbot and all client when using chatbot...

4.8CVSS5.8AI score0.00123EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:36 p.m.5 views

CVE-2022-2811

A vulnerability classified as problematic has been found in SourceCodester Guest Management System. This affects an unknown part of the file myform.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been...

6.1CVSS6.2AI score0.00212EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 7:31 p.m.6 views

CVE-2005-2811

Untrusted search path vulnerability in Net-SNMP 5.2.1.2 and earlier, on Gentoo Linux, installs certain Perl modules with an insecure DTRPATH, which could allow local users to gain privileges...

4.6CVSS6.8AI score0.00068EPSS
Exploits0References1
NVD
NVD
added 2025/04/26 7:15 a.m.13 views

CVE-2025-2811

A vulnerability was found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mango, GL-MT1300 Beryl, GL-MT250...

6.9CVSS0.00067EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/04/26 7:0 a.m.7 views

CVE-2025-2811 GL.iNet GL-A1300 Slate Plus API redos

A vulnerability was found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mango, GL-MT1300 Beryl, GL-MT250...

6.9CVSS5.7AI score0.00067EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/04/26 7:0 a.m.17 views

CVE-2025-2811 GL.iNet GL-A1300 Slate Plus API redos

A vulnerability was found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mango, GL-MT1300 Beryl, GL-MT250...

6.9CVSS0.00067EPSS
Exploits0References5
CVE
CVE
added 2025/04/26 7:0 a.m.57 views

CVE-2025-2811

CVE-2025-2811 affects GL.iNet devices (e.g., GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR750 Creta, GL-AX1800 Flint, GL-MT2500 Brume 2, etc.) where the API component handles input in a way that leads to inefficient regular expression (redos) complexity. Public sources describe it as an API-leve...

6.9CVSS5.7AI score0.00067EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/03/03 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2010-2811

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Virtual Desktop Server Manager VDSM in Red Hat Enterprise Virtualization RHEV 2.2 does not properly accept TCP connections for SSL sessions, which allows remote...

5.7CVSS5.9AI score0.00543EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/08/08 12:0 a.m.23 views

SUSE SLES15 Security Update : bind (SUSE-SU-2024:2811-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2811-1 advisory. - CVE-2024-1737: It is possible to craft excessively large numbers of resource record types for a given owner name, which has the...

7.5CVSS7.8AI score0.00282EPSS
Exploits0References7
Oracle linux
Oracle linux
added 2024/05/23 12:0 a.m.34 views

mutt security update

5:2.0.7-3 - Fix for: CVE-2023-4874 CVE-2023-4875 - Resolves: RHEL-2811...

6.5CVSS6.9AI score0.00091EPSS
Exploits0
CVE
CVE
added 2024/03/22 6:0 a.m.55 views

CVE-2024-2811

The CVE-2024-2811 issue affects the Tenda AC15 15.03.20_multi, specifically the function formWifiWpsStart in /goform/WifiWpsStart. The vulnerability is triggered by manipulating the index argument, causing a stack-based buffer overflow. It can be exploited remotely and has been disclosed publicly...

9.8CVSS8.8AI score0.00533EPSS
Exploits1References3Affected Software1
Circl
Circl
added 2023/11/15 4:53 p.m.1 views

CVE-2019-2811

creationtimestamp| type| source ---|---|--- 2023-11-15 16:53:22+00:00| seen| https://t.me/BABATATASASA/5989...

4.9CVSS6.2AI score0.00421EPSS
Exploits0References1
Circl
Circl
added 2023/06/27 1:12 p.m.1 views

CVE-2023-2811

creationtimestamp| type| source ---|---|--- 2023-06-27 13:12:31+00:00| seen| https://t.me/kasraonecom/320...

4.8CVSS6.5AI score0.00123EPSS
Exploits2References1
NVD
NVD
added 2023/06/19 11:15 a.m.9 views

CVE-2023-2811

The AI ChatBot WordPress plugin before 4.5.6 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks to all admin when setting chatbot and all client when using chatbot...

4.8CVSS4.8AI score0.00123EPSS
Exploits2References1
CVE
CVE
added 2023/06/19 10:52 a.m.84 views

CVE-2023-2811

CVE-2023-2811 affects the AI ChatBot WordPress plugin (pre-4.5.6). The issue is due to insufficient sanitisation/escaping of numerous settings, allowing stored cross-site scripting that can impact all admins when configuring the chatbot and all users of the chatbot. The primary root cause is impr...

4.8CVSS5AI score0.00123EPSS
Exploits2References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/06/19 10:52 a.m.9 views

CVE-2023-2811 AI ChatBot < 4.5.6 - Admin+ Stored Cross-Site Scripting

The AI ChatBot WordPress plugin before 4.5.6 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks to all admin when setting chatbot and all client when using chatbot...

4.8AI score0.00123EPSS
Exploits2References1
Patchstack
Patchstack
added 2023/06/19 12:0 a.m.11 views

WordPress ChatBot Plugin < 4.5.6 is vulnerable to Cross Site Scripting (XSS)

Software ChatBot Type Plugin Vulnerable versions 4.5.6 Fixed in 4.5.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-2811 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID eb7005b63455 Credits NGO VAN TU Required privilege...

4.8CVSS5.7AI score0.00123EPSS
Exploits2References3Affected Software1
F5 Networks
F5 Networks
added 2023/02/21 7:0 p.m.56 views

K10754336: MySQL vulnerabilities CVE-2019-2808, CVE-2019-2810, CVE-2019-2811, CVE-2019-2812, and CVE-2019-2814

Security Advisory Description CVE-2019-2808 Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple...

6.5CVSS4.8AI score0.00421EPSS
Exploits0
Rows per page
Query Builder