114 matches found
RHCOS 2 : Red Hat OpenShift Enterprise 2.2.7 (RHSA-2015:1844)
The remote Red Hat Enterprise Linux CoreOS 2 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:1844 advisory. - jenkins: Combination filter Groovy script unsecured SECURITY-125 CVE-2015-1806 - jenkins: directory traversal from artifacts via...
RHCOS 2 : rubygem-openshift-origin-console (RHSA-2015:1808)
The remote Red Hat Enterprise Linux CoreOS 2 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2015:1808 advisory. - 2.2: API command injection vulnerability CVE-2015-5274 Note that Nessus has not tested for this issue but has instead relied only on the...
EUVD-2026-1808
Not used...
CVE-2025-1808
A vulnerability has been found in Pixsoft E-Saphira 1.7.24 and classified as critical. This vulnerability affects unknown code of the file /servlet?act=login=1 of the component Login Endpoint. The manipulation of the argument txtUsuario leads to sql injection. The attack can be initiated remotely...
CVE-2024-1808
The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'suqrcode' shortcode in all versions up to, and including, 7.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...
CVE-2021-1808
A memory corruption issue was addressed with improved validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An application may be able to read restricted memory...
CVE-2010-1808
Stack-based buffer overflow in Apple Type Services ATS in Apple Mac OS X 10.5.8 and 10.6.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted embedded font in a document...
CVE-2002-1808
Cross-site scripting XSS vulnerability in Meunity Community System 1.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag when creating a topic...
Linux Distros Unpatched Vulnerability : CVE-2013-1808
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in ZeroClipboard.swf and ZeroClipboard10.swf in ZeroClipboard before 1.0.8, as used in em-shorty, RepRapCalculator,...
CVE-2025-1808
creationtimestamp| type| source ---|---|--- 2025-03-02 01:31:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6084 2025-03-02 02:30:38+00:00| published-proof-of-concept| Telegram/yqhHHpTMJThvOnMP9KSTnP0VqA7-wzWy3afb6m7cmgNDxD4 2025-03-02 04:23:54+00:00| seen|...
CVE-2025-1808
A vulnerability has been found in Pixsoft E-Saphira 1.7.24 and classified as critical. This vulnerability affects unknown code of the file /servlet?act=login&tipo=1 of the component Login Endpoint. The manipulation of the argument txtUsuario leads to sql injection. The attack can be initiated...
CVE-2025-1808 Pixsoft E-Saphira Login Endpoint servlet sql injection
A vulnerability has been found in Pixsoft E-Saphira 1.7.24 and classified as critical. This vulnerability affects unknown code of the file /servlet?act=login&tipo=1 of the component Login Endpoint. The manipulation of the argument txtUsuario leads to sql injection. The attack can be initiated...
CVE-2025-1808
CVE-2025-1808 affects Pixsoft E-Saphira 1.7.24. The vulnerability exists in the Login Endpoint, specifically in the file path /servlet?act=login&tipo=1, where manipulating the argument txtUsuario leads to an SQL injection. It is exploitable remotely and exploitation has been disclosed publicly. M...
CVE-2022-1808
Execution with Unnecessary Privileges in GitHub repository polonel/trudesk prior to 1.2.3...
Siemens RUGGEDCOM APE 1808
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
CVE-2024-1808
creationtimestamp| type| source ---|---|--- 2024-02-28 14:27:06+00:00| seen| https://t.me/ctinow/195474 2024-02-28 14:33:56+00:00| seen| https://t.me/ctinow/195489 2024-03-15 00:31:35+00:00| seen| https://t.me/ctinow/208307...
CVE-2024-1808
CVE-2024-1808 affects the WordPress WP Shortcodes Plugin — Shortcodes Ultimate. It describes a Stored Cross-Site Scripting (XSS) in the plugin’s su_qrcode shortcode for all versions up to 7.0.3, caused by insufficient input sanitization and output escaping on user-supplied attributes. Exploitatio...
WordPress Shortcodes Ultimate Plugin <= 7.0.3 is vulnerable to Cross Site Scripting (XSS)
Software Shortcodes Ultimate Type Plugin Vulnerable versions = 7.0.3 Fixed in 7.0.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1808 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 79f47d814a15 Credits Webbernaut Required...
MAL-2024-340 Malicious code in wlwz-2312-1808 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dddff4614123e97568be56cd8903bbfefb1aa3df8d6600287abd8cc7c803b386 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Amazon Linux AMI : amanda (ALAS-2023-1808)
The version of amanda installed on the remote host is prior to 2.6.1p2-8.14. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1808 advisory. An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation...