Lucene search
K

118 matches found

EUVD
EUVD
added 2026/01/23 3:23 p.m.2 views

EUVD-2026-4311

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free warning in btrfsgetorcreatedelayednode Previously, btrfsgetorcreatedelayednode set the delayednode's refcount before acquiring the root-delayednodes lock. Commit e8513c012de7 "btrfs: implement reftracker...

5.3AI score0.00025EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/01/09 11:54 a.m.6 views

CVE-2018-4311

The issue was addressed by removing origin information. This issue affected versions prior to iOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

8.1CVSS6.3AI score0.00455EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:46 a.m.5 views

CVE-2022-4311

An insertion of sensitive information into log file vulnerability exists in PcVue versions 15 through 15.2.2. This could allow a user with access to the log files to discover connection strings of data sources configured for the DbConnect, which could include credentials. Successful exploitation ...

6.5CVSS6.4AI score0.00362EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/08 4:16 a.m.16 views

CVE-2025-4311

A vulnerability classified as critical was found in itsourcecode Content Management System 1.0. This vulnerability affects unknown code of the file /admin/updatemaintopicimg.php?topicid=529. The manipulation of the argument stopicid leads to sql injection. The attack can be initiated remotely. Th...

9.8CVSS7.6AI score0.00204EPSS
Exploits1References1
NVD
NVD
added 2025/05/06 4:16 a.m.11 views

CVE-2025-4311

A vulnerability classified as critical was found in itsourcecode Content Management System 1.0. This vulnerability affects unknown code of the file /admin/updatemaintopicimg.php?topicid=529. The manipulation of the argument stopicid leads to sql injection. The attack can be initiated remotely. Th...

9.8CVSS0.00204EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/05/06 4:0 a.m.5 views

CVE-2025-4311 itsourcecode Content Management System update_main_topic_img.php sql injection

A vulnerability classified as critical was found in itsourcecode Content Management System 1.0. This vulnerability affects unknown code of the file /admin/updatemaintopicimg.php?topicid=529. The manipulation of the argument stopicid leads to sql injection. The attack can be initiated remotely. Th...

7.5CVSS7.6AI score0.00204EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/05/06 4:0 a.m.13 views

CVE-2025-4311 itsourcecode Content Management System update_main_topic_img.php sql injection

A vulnerability classified as critical was found in itsourcecode Content Management System 1.0. This vulnerability affects unknown code of the file /admin/updatemaintopicimg.php?topicid=529. The manipulation of the argument stopicid leads to sql injection. The attack can be initiated remotely. Th...

7.5CVSS0.00204EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2025/03/03 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2008-4311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The default configuration of system.conf in D-Bus aka DBus before 1.2.6 omits the sendtype attribute in certain rules, which allows local users to bypass intend...

4.6CVSS6.6AI score0.00033EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/01/03 12:0 a.m.6 views

ZenML < 0.57.0 Password Reset Brute Force (CVE-2024-4311)

The version of ZenML installed on the remote host is prior to 0.57.0. It is, therefore, affected by an account takeover exposure due to the lack of rate-limiting in the password change function. An attacker can brute-force the current password in the 'Update Password' function, allowing them to...

5.4CVSS5.8AI score0.00072EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2024/11/14 5:35 p.m.8 views

CVE-2024-4311 Lack of login attempt rate-limiting in zenml-io/zenml

zenml-io/zenml version 0.56.4 is vulnerable to an account takeover due to the lack of rate-limiting in the password change function. An attacker can brute-force the current password in the 'Update Password' function, allowing them to take over the user's account. This vulnerability is due to the...

5.4CVSS5.7AI score0.00072EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.19 views

RHEL 4 : dbus (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - dbus: incorrect use of send|receiverequestedreply policy rule attribute in system.conf CVE-2008-4311 Note that Ness...

4.6CVSS6.5AI score0.00033EPSS
Exploits0References1
Circl
Circl
added 2024/01/29 1:11 p.m.1 views

CVE-2019-4311

creationtimestamp| type| source ---|---|--- 2024-01-29 13:11:27+00:00| seen| https://t.me/ctinow/175213...

5.3CVSS5.4AI score0.00243EPSS
Exploits0References1
Circl
Circl
added 2023/12/21 11:16 p.m.1 views

CVE-2023-4311

creationtimestamp| type| source ---|---|--- 2023-12-21 23:16:40+00:00| seen| https://t.me/ctinow/158031 2024-01-12 11:36:30+00:00| seen| https://t.me/ctinow/167201...

8.8CVSS8.1AI score0.00476EPSS
Exploits2References2
CVE
CVE
added 2023/12/18 8:7 p.m.46 views

CVE-2023-4311

CVE-2023-4311 affects the Vrm 360 3D Model Viewer WordPress plugin (versions up to 1.2.1). The vulnerability is an arbitrary file upload due to insufficient checks in a plugin shortcode, enabling potential remote code execution. Public sources in the connected records describe PoCs and demonstrat...

8.8CVSS8.7AI score0.00476EPSS
Exploits2References1Affected Software1
Cvelist
Cvelist
added 2023/12/18 8:7 p.m.12 views

CVE-2023-4311 Vrm 360 3D Model Viewer <= 1.2.1 - Contributor+ Arbitrary File Upload Leading to RCE

The Vrm 360 3D Model Viewer WordPress plugin through 1.2.1 is vulnerable to arbitrary file upload due to insufficient checks in a plugin shortcode...

8.8AI score0.00476EPSS
Exploits2References1
Circl
Circl
added 2023/01/09 2:27 p.m.3 views

CVE-2021-4311

creationtimestamp| type| source ---|---|--- 2023-01-09 14:27:29+00:00| seen| https://t.me/cibsecurity/56145 2025-04-09 19:48:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11153...

9.8CVSS6.2AI score0.00296EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/01/09 11:20 a.m.5 views

CVE-2021-4311 Talend Open Studio for MDM XML xml external entity reference

A vulnerability classified as problematic was found in Talend Open Studio for MDM. This vulnerability affects unknown code of the component XML Handler. The manipulation leads to xml external entity reference. The patch is identified as 31d442b9fb1d518128fd18f6e4d54e06c3d67793. It is recommended ...

5.5CVSS9.6AI score0.00296EPSS
Exploits0References4
CVE
CVE
added 2023/01/09 11:20 a.m.47 views

CVE-2021-4311

CVE-2021-4311 affects Talend Open Studio for MDM, due to a vulnerability in an unknown XML Handler component that permits an XML External Entity (XXE) reference. The public descriptions cite a patch identified as 31d442b9fb1d518128fd18f6e4d54e06c3d67793 and recommend applying it to fix the issue....

9.8CVSS7.6AI score0.00296EPSS
Exploits0References4Affected Software1
ICS
ICS
added 2022/12/20 12:0 a.m.24 views

ARC Informatique PcVue

1. EXECUTIVE SUMMARY CVSS v3 5.5 ATTENTION: Low attack complexity Vendor: ARC Informatique Equipment: PcVue Vulnerabilities: Cleartext Storage of Sensitive Information, Insertion of Sensitive Information into Log File 2. UPDATE OR REPOSTED INFORMATION This updated advisory is a follow-up to the...

6.5CVSS6.4AI score0.00362EPSS
Exploits0References4
Circl
Circl
added 2022/12/12 8:21 p.m.0 views

CVE-2022-4311

creationtimestamp| type| source ---|---|--- 2022-12-12 20:21:06+00:00| seen| https://t.me/cibsecurity/54342...

6.5CVSS6.3AI score0.00362EPSS
Exploits0References1
Rows per page
Query Builder