109 matches found
CVE-2026-0958
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to cause denial of service through memory or CPU exhaustion by bypassing JSON validation middleware limits...
Linux Distros Unpatched Vulnerability : CVE-2026-0958
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowe...
CVE-2026-0958
CVE-2026-0958 affects GitLab CE/EE versions 18.4 up to before 18.6.6, 18.7 up to before 18.7.4, and 18.8 up to before 18.8.4. An unauthenticated user could cause a denial of service by exhausting memory or CPU, via bypassing JSON validation middleware limits. GitLab has remediated with patch rele...
CVE-2026-0958
Removed by vendor...
CVE-2026-0958 Interpretation Conflict in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 18.6.6, 18.7 before 18.7.4, and 18.8 before 18.8.4 that could have allowed an unauthenticated user to cause denial of service through memory or CPU exhaustion by bypassing JSON validation middleware limits...
CVE-2021-0958
In update of kmcompat.cpp, there is a possible loss of potentially sensitive data due to a logic error in the code. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...
CVE-2022-0958
The Mark Posts WordPress plugin before 2.0.1 does not escape new markers, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
Linux Distros Unpatched Vulnerability : CVE-2013-0958
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash...
CVE-2020-0958
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0956, CVE-2020-0957...
CVE-2019-0958
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0957...
CVE-2012-0958
content/unity-api.js in the unity-firefox-extension extension 2.4.1 for Firefox exposes the toDataURL function in an API call, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted webpage...
CVE-2025-0958
The Ultimate WordPress Auction Plugin plugin for WordPress is vulnerable to unauthorized access to functionality in all versions up to, and including, 4.2.9. This makes it possible for authenticated attackers, with Contributor-level access and above, to delete arbitrary auctions, posts as well as...
CVE-2025-0958 Ultimate WordPress Auction Plugin <= 4.2.9 - Missing Authorization to Arbitrary Post Deletion
The Ultimate WordPress Auction Plugin plugin for WordPress is vulnerable to unauthorized access to functionality in all versions up to, and including, 4.2.9. This makes it possible for authenticated attackers, with Contributor-level access and above, to delete arbitrary auctions, posts as well as...
CVE-2025-0958 Ultimate WordPress Auction Plugin <= 4.2.9 - Missing Authorization to Arbitrary Post Deletion
The Ultimate WordPress Auction Plugin plugin for WordPress is vulnerable to unauthorized access to functionality in all versions up to, and including, 4.2.9. This makes it possible for authenticated attackers, with Contributor-level access and above, to delete arbitrary auctions, posts as well as...
CVE-2025-0958
CVE-2025-0958 concerns the Ultimate WordPress Auction Plugin (
RHEL 8 : thunderbird (RHSA-2024:0958)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:0958 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 115.8.0. Security Fixes: Mozilla:...
CVE-2024-0958
creationtimestamp| type| source ---|---|--- 2024-01-27 07:26:39+00:00| seen| https://t.me/ctinow/174659 2024-02-02 08:16:23+00:00| seen| https://t.me/ctinow/177957 2024-02-19 22:56:08+00:00| seen| https://t.me/ctinow/187960...
CVE-2024-0958
CVE-2024-0958 affects CodeAstro Stock Management System 1.0, specifically the Add Category Handler’s /index.php. The vulnerability arises from improper processing of the Category Name and Category Description parameters, enabling cross-site scripting (XSS). Likely exploitable remotely, with publi...
CVE-2016-0958
creationtimestamp| type| source ---|---|--- 2024-01-06 13:56:10+00:00| seen| https://t.me/arpsyndicate/2543...
CVE-2023-0958
creationtimestamp| type| source ---|---|--- 2023-07-28 12:29:34+00:00| seen| https://t.me/cibsecurity/67370...