Lucene search
+L

117 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 11:57 a.m.12 views

CVE-2018-4411

A memory corruption issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14...

7.8CVSS6.4AI score0.01082EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/16 12:0 a.m.5 views

DLA-4411-1 libgd2 - security update

Bulletin has no description...

7.5CVSS6.9AI score0.02051EPSS
SaveExploits2
OSV
OSV
added 2025/09/15 1:11 a.m.1 views

ECHO-2B99-4411-2A02

Bulletin has no description...

5.5CVSS7AI score0.00159EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/25 12:26 p.m.6 views

CVE-2025-4411

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Dataprom Informatics PACS-ACSS allows Cross-Site Scripting XSS. This issue affects PACS-ACSS: before 16.05.2025...

6.5CVSS5.4AI score0.00283EPSS
SaveExploits0References1
NVD
NVD
added 2025/07/23 1:15 p.m.11 views

CVE-2025-4411

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Dataprom Informatics PACS-ACSS allows Cross-Site Scripting XSS. This issue affects PACS-ACSS: before 16.05.2025...

6.5CVSS0.00283EPSS
SaveExploits0References2
Circl
Circl
added 2025/07/23 1:4 p.m.8 views

CVE-2025-4411

creationtimestamp| type| source ---|---|--- 2025-07-23 13:04:57+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lun3enigvvo2...

6.5CVSS4.8AI score0.00283EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/07/23 12:19 p.m.6 views

CVE-2025-4411

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Dataprom Informatics PACS-ACSS allows Cross-Site Scripting XSS. This issue affects PACS-ACSS: before 16.05.2025...

6.5CVSS5.4AI score0.00283EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/07/23 12:19 p.m.5 views

CVE-2025-4411 XSS in Dataprom Informatics' PACS-ACSS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Dataprom Informatics PACS-ACSS allows Cross-Site Scripting XSS. This issue affects PACS-ACSS: before 16.05.2025...

6.5CVSS5.4AI score0.00283EPSS
SaveExploits0References2
CVE
CVE
added 2024/05/09 8:3 p.m.35 views

CVE-2024-4411

CVE-2024-4411 affects the Mihdan: Yandex Turbo Feed plugin for WordPress. The vulnerability is a Stored XSS via the plugin’s shortcode attributes caused by insufficient input sanitization and output escaping. It affects all versions up to and including 1.6.5.1. The impact, as described in connect...

6.4CVSS7.6AI score0.00353EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/05/09 8:3 p.m.13 views

CVE-2024-4411 Mihdan: Yandex Turbo Feed <= 1.6.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Mihdan: Yandex Turbo Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 1.6.5.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...

6.4CVSS5.8AI score0.00353EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/05/06 12:0 a.m.9 views

WordPress Mihdan: Yandex Turbo Feed Plugin <= 1.6.5.1 is vulnerable to Cross Site Scripting (XSS)

Software Mihdan: Yandex Turbo Feed Type Plugin Vulnerable versions = 1.6.5.1 Fixed in 1.6.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4411 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 7511f9588339 Credits Peter...

6.4CVSS5.8AI score0.00353EPSS
SaveExploits0References3Affected Software1
Circl
Circl
added 2024/02/11 9:2 a.m.10 views

CVE-2019-4411

creationtimestamp| type| source ---|---|--- 2024-02-11 09:02:03+00:00| seen| https://t.me/ctinow/182720...

4.3CVSS4.5AI score0.00816EPSS
SaveExploits0References1
Circl
Circl
added 2023/09/05 8:16 p.m.9 views

CVE-2018-4411

creationtimestamp| type| source ---|---|--- 2023-09-05 20:16:41+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/205...

7.8CVSS8.4AI score0.01082EPSS
SaveExploits0References1
CVE
CVE
added 2023/08/18 2:0 p.m.51 views

CVE-2023-4411

The CVE-2023-4411 vulnerability affects TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023, enabling remote OS command injection via the setTracerouteCfg function. Exploitation requires no user interaction beyond remote access; multiple sources confirm public disclosure. The root cause is input handling ...

9.8CVSS8.3AI score0.04618EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2023/07/12 3:40 a.m.86 views

CVE-2021-4411

CVE-2021-4411 involves the WP EasyPay – Square for WordPress plugin for WordPress, with a Cross-Site Request Forgery flaw up to version 3.2.0 caused by missing or incorrect nonce validation in the wpep_download_transaction_in_excel() function. This allows unauthenticated attackers to trigger a tr...

4.3CVSS4.3AI score0.00395EPSS
SaveExploits0References10Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/05/25 11:1 p.m.19 views

Security Bulletin: A vulnerability in IBM Spectrum Scale packaged in IBM Elastic Storage System 3000 cause denial of service in kernel ( CVE-2020-4411)

Summary A security vulnerability has been identified in all levels of IBM Elastic Storage System 3000 that could allow a local attacker to cause a denial of service. A fix for this vulnerability is available. Vulnerability Details CVEID:CVE-2020-4411 DESCRIPTION: The Spectrum Scale 4.2.0.0 throug...

7.1CVSS6.9AI score0.00321EPSS
SaveExploits0Affected Software1
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.28 views

SUSE: Security Advisory (SUSE-SU-2012:1486-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.9CVSS6.4AI score0.00443EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.20 views

SUSE: Security Advisory (SUSE-SU-2012:1487-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.9CVSS6.4AI score0.00443EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.31 views

SUSE: Security Advisory (SUSE-SU-2012:1503-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.9CVSS5.8AI score0.03718EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/07/06 12:0 a.m.70 views

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-4411-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4411-1 advisory. It was discovered that the elf handling code in the Linux kernel did not initialize memory before using it in certain situations. A local attacker could...

6.7CVSS6.7AI score0.04505EPSS
SaveExploits0References6
Rows per page
Query Builder