Lucene search
K

81 matches found

Circl
Circl
added 2026/03/11 7:16 a.m.2 views

CVE-2026-2918

creationtimestamp| type| source ---|---|--- 2026-03-11 07:16:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-2918...

6.4CVSS5.7AI score0.00047EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/24 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2017-2918

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable integer overflow exists in the Image loading functionality of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file c...

8.8CVSS8.1AI score0.01064EPSS
Exploits1References2
NVD
NVD
added 2025/06/10 12:15 p.m.8 views

CVE-2025-2918

The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 3.3.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00176EPSS
Exploits0References5
Circl
Circl
added 2025/06/10 11:34 a.m.1 views

CVE-2025-2918

creationtimestamp| type| source ---|---|--- 2025-06-10 11:34:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17869...

6.4CVSS4.8AI score0.00176EPSS
Exploits0References1
CVE
CVE
added 2024/04/09 6:42 p.m.34 views

CVE-2024-2918

CVE-2024-2918 affects Devolutions Server 2024.1.6 and earlier, via improper input validation in the PAM JIT elevation feature. The issue allows an attacker with access to PAM JIT elevation to forge the displayed group in the PAM JIT elevation checkout request through a specially crafted request. ...

3.6CVSS6.7AI score0.00141EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2023/06/16 5:15 p.m.5 views

CVE-2023-2918

Rejected reason: Duplicate Assignment...

6.6AI score
Exploits0
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.26 views

Mageia: Security Advisory (MGASA-2013-0306)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.02346EPSS
Exploits1References4
Prion
Prion
added 2018/12/03 5:29 p.m.36 views

Design/Logic Flaw

It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of the flaw and bypass the -dSAFER protection to, for example, execute arbitrary shell commands via a specially crafted PostScript document. This only affects ghostscript 9.07 as...

9.3CVSS8AI score0.9181EPSS
Exploits4References6Affected Software7
NVD
NVD
added 2018/12/03 5:29 p.m.24 views

CVE-2018-16863

It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of the flaw and bypass the -dSAFER protection to, for example, execute arbitrary shell commands via a specially crafted PostScript document. This only affects ghostscript 9.07 as...

9.3CVSS7.3AI score0.00083EPSS
Exploits3References6
UbuntuCve
UbuntuCve
added 2018/12/03 5:29 p.m.23 views

CVE-2018-16863

It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of the flaw and bypass the -dSAFER protection to, for example, execute arbitrary shell commands via a specially crafted PostScript document. This only affects ghostscript 9.07 as...

9.3CVSS7.3AI score0.00083EPSS
Exploits3References7
Debian CVE
Debian CVE
added 2018/12/03 5:0 p.m.47 views

CVE-2018-16863

It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of the flaw and bypass the -dSAFER protection to, for example, execute arbitrary shell commands via a specially crafted PostScript document. This only affects ghostscript 9.07 as...

9.3CVSS8.3AI score0.00083EPSS
Exploits3
CVE
CVE
added 2018/12/03 5:0 p.m.188 views

CVE-2018-16863

Ghostscript on Red Hat/CentOS environments (Ghostscript 9.07 in RHEL7) contains an incomplete fix for CVE-2018-16509, allowing bypass of the -dSAFER protection via crafted PostScript and potential execution of arbitrary shell commands. CVE-2018-16863 ties to this by noting the residual flaw and i...

9.3CVSS7.5AI score0.00083EPSS
Exploits3References6Affected Software1
RedhatCVE
RedhatCVE
added 2018/12/03 3:20 p.m.35 views

CVE-2018-16863

It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of the flaw and bypass the -dSAFER protection to, for example, execute arbitrary shell commands via a specially crafted PostScript document...

9.3CVSS3.7AI score0.9181EPSS
Exploits4References2
OpenVAS
OpenVAS
added 2018/10/16 12:0 a.m.31 views

CentOS Update for ghostscript CESA-2018:2918 centos7

Check the version of ghostscript SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882962";...

9.3CVSS7.2AI score0.9181EPSS
Exploits4References2
Virtuozzo
Virtuozzo
added 2018/10/15 12:0 a.m.15 views

Virtuozzo Linux Errata and Security Advisory 2018:2918 Important

Upstream security update. Follow RHSA-2018:2918 for details...

7.1AI score
Exploits0
CVE
CVE
added 2018/07/18 1:0 p.m.41 views

CVE-2018-2918

The CVE-2018-2918 entry concerns the Sun ZFS Storage Appliance Kit (AK) in the Oracle Sun Systems Products Suite, specifically its API frameworks subcomponent. Affected are versions prior to 8.7.18. The vulnerability is described as exploitable by an unauthenticated attacker who has network acces...

7.5CVSS7.3AI score0.03709EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2018/07/18 12:0 a.m.33 views

Debian DSA-4248-1 : blender - security update

Multiple vulnerabilities have been discovered in various parsers of Blender, a 3D modeller/ renderer. Malformed .blend model files and malformed multimedia files AVI, BMP, HDR, CIN, IRIS, PNG, TIFF may result in the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive tex...

8.8CVSS8AI score0.0378EPSS
Exploits21References24
OpenVAS
OpenVAS
added 2018/07/16 12:0 a.m.42 views

Debian: Security Advisory (DSA-4248-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8AI score0.0378EPSS
Exploits21References4
OSV
OSV
added 2018/04/24 7:29 p.m.1 views

DEBIAN-CVE-2017-2918

An exploitable integer overflow exists in the Image loading functionality of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An...

7.8CVSS9.1AI score0.01064EPSS
Exploits1References1
OSV
OSV
added 2018/04/24 7:29 p.m.10 views

CVE-2017-2918

An exploitable integer overflow exists in the Image loading functionality of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An...

7.8CVSS8.2AI score
Exploits0References3
Rows per page
Query Builder