Lucene search
+L

93 matches found

NVD
NVD
added 2023/02/22 11:15 p.m.14 views

CVE-2017-1008

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

6.5AI score
SaveExploits0
OpenVAS
OpenVAS
added 2023/01/09 12:0 a.m.16 views

Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2023-1008)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8AI score0.0226EPSS
SaveExploits1References2
Circl
Circl
added 2022/04/11 6:16 p.m.9 views

CVE-2022-1008

creationtimestamp| type| source ---|---|--- 2022-04-11 18:16:18+00:00| seen| https://t.me/cibsecurity/40477...

7.2CVSS7AI score0.01653EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2022/04/11 2:41 p.m.31 views

CVE-2022-1008 One Click Demo Import < 3.1.0 - Admin+ Arbitrary File Upload

The One Click Demo Import WordPress plugin before 3.1.0 does not validate the imported file, allowing high privilege users such as admin to upload arbitrary files such as PHP even when FILEMODS and FILEEDIT are disallowed...

7.1AI score0.01653EPSS
SaveExploits2References2
CVE
CVE
added 2022/04/11 2:41 p.m.103 views

CVE-2022-1008

The CVE-2022-1008 entry concerns the WordPress plugin One Click Demo Import (up to version 3.0.x; fixed in 3.1.0) where imported files are not validated. This enables high-privilege users (e.g., admin) to upload arbitrary files (such as PHP) even when FILE_MODS and FILE_EDIT are disallowed. Multi...

7.2CVSS6.9AI score0.01653EPSS
SaveExploits2References2Affected Software1
Nextcloud
Nextcloud
added 2022/01/26 7:21 p.m.58 views

Permission bypass in DiskLruImageCacheFileProvider (GHSL-2021-1008)

None...

5.3CVSS5.6AI score0.00948EPSS
SaveExploits0References2Affected Software1
Circl
Circl
added 2021/12/15 10:40 p.m.7 views

CVE-2021-1008

creationtimestamp| type| source ---|---|--- 2021-12-15 22:40:18+00:00| seen| https://t.me/cibsecurity/34093...

4.4CVSS4.6AI score0.00107EPSS
SaveExploits0References1
NVD
NVD
added 2021/12/15 7:15 p.m.61 views

CVE-2021-1008

In addSubInfo of SubscriptionController.java, there is a possible way to force the user to make a factory reset due to a logic error in the code. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation.Product:...

4.4CVSS0.00107EPSS
SaveExploits0References1
CVE
CVE
added 2021/12/15 6:6 p.m.71 views

CVE-2021-1008

CVE-2021-1008 affects Android 12; the issue is in addSubInfo of SubscriptionController.java, described as a logic error that could force a factory reset, yielding local denial of service with system privileges. Exploitation is stated as possible without user interaction. Connected documents corro...

4.4CVSS4.5AI score0.00107EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.21 views

SUSE: Security Advisory (SUSE-SU-2018:1008-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.03543EPSS
SaveExploits1References7
NVD
NVD
added 2020/04/15 3:15 p.m.20 views

CVE-2020-1008

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960, CVE-2020-0988, CVE-2020-099...

9.3CVSS8.1AI score0.11685EPSS
SaveExploits0References1
Prion
Prion
added 2020/04/15 3:15 p.m.19 views

Remote code execution

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960, CVE-2020-0988, CVE-2020-099...

9.3CVSS8AI score0.17297EPSS
SaveExploits0References1Affected Software5
CVE
CVE
added 2020/04/15 3:13 p.m.117 views

CVE-2020-1008

CVE-2020-1008 describes a Remote Code Execution flaw in the Windows Jet Database Engine caused by improper handling of in-memory objects. The connected KB4549951 article references fixes related to the JET Database Engine within Windows 10 builds 18362.778/18363.778, but does not provide a produc...

9.3CVSS8AI score0.11685EPSS
SaveExploits0References1Affected Software8
Cvelist
Cvelist
added 2020/04/15 3:13 p.m.23 views

CVE-2020-1008

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960, CVE-2020-0988, CVE-2020-099...

8.3AI score0.11685EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/04/14 12:0 a.m.47 views

KB4550930: Windows 10 April 2020 Security Update

The remote Windows host is missing security update 4550930. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles file redirections. An attacker who successfully exploited this vulnerability could...

9.3CVSS8.3AI score0.69166EPSS
SaveExploits4References52
Tenable Nessus
Tenable Nessus
added 2020/04/14 12:0 a.m.329 views

KB4550970: Windows 8.1 and Windows Server 2012 R2 April 2020 Security Update

The remote Windows host is missing security update 4550970 or cumulative update 4550961. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles file redirections. An attacker who successfully...

9.3CVSS8.3AI score0.69166EPSS
SaveExploits4References43
Tenable Nessus
Tenable Nessus
added 2020/04/14 12:0 a.m.94 views

KB4550965: Windows 7 and Windows Server 2008 R2 April 2020 Security Update

The remote Windows host is missing security update 4550965 or cumulative update 4550964. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploit...

9.3CVSS8.2AI score0.69166EPSS
SaveExploits4References42
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.97 views

Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2016-1008)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.3AI score0.37016EPSS
SaveExploits13References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.36 views

Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2019-1008)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS6.3AI score0.98631EPSS
SaveExploits24References2
Tenable Nessus
Tenable Nessus
added 2019/07/12 12:0 a.m.35 views

Security Update for Microsoft Dynamics 365 (on-premises) (May 2019)

The version of Microsoft Dynamics 365 on-premises installed on the remote Windows host is 7.x 7.0.3.147, 8.x 8.2.6.19, 9.x 9.0.4.5. It is, therefore, affected by a security feature bypass vulnerability. An unauthenticated, remote attacker could exploit this issue, to send attachment types that ar...

5.9CVSS6AI score0.02762EPSS
SaveExploits0References8
Rows per page
Query Builder