29 matches found
CVE-2026-7302
creationtimestamp| type| source ---|---|--- 2026-05-18 17:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mm5e2l2fzt2g...
Oracle Linux 9 : nodejs:22 (ELSA-2026-7302)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-7302 advisory. - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163369 Fixes: CVE-2026-152...
CVE-2025-7302
CVE-2025-7302 affects IrfanView CADImage Plugin, with a memory corruption vulnerability in DWG file parsing. The flaw stems from insufficient validation of user-supplied data, enabling remote code execution in the plugin when a user opens a malicious DWG file or visits a crafted page. Multiple so...
CVE-2025-7302 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...
CVE-2020-7302
Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows authenticated attackers to upload malicious files to the DLP case management section via lack of sanity checking...
CVE-2008-7302
SQL injection vulnerability in netinvoice.php in the nBill comnetinvoice component 1.2.0 SP1 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving "knowledge of ... the contents of an encrypted file."...
Linux Distros Unpatched Vulnerability : CVE-2017-7302
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, has a swapstdrelocout function in bfd/aoutx.h that is vulnerable to an...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : libxml2 vulnerabilities (USN-7302-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7302-1 advisory. It was discovered that libxml2 incorrectly handled certain memory operations. A remot...
Malicious code in wlwz-2312-7302 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41f9ed90f9cc422800761f51077125436dbb2da6acd18f8d6b048ad1794a5db9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-829 Malicious code in wlwz-2312-7302 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41f9ed90f9cc422800761f51077125436dbb2da6acd18f8d6b048ad1794a5db9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE: Security Advisory (SUSE-SU-2017:3170-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
McAfee Data Loss Prevention ePO extension Multiple Vulnerabilities (SB10326)
The remote host is running a version of McAfee ePolicy Orchestrator that is affected by multiple vulnerabilities, including the following: - Unrestricted Upload of File with Dangerous Type in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows authenticated attackers to upload...
CVE-2020-7302
CVE-2020-7302 describes an issue in the McAfee Data Loss Prevention (DLP) ePO extension for McAfee ePolicy Orchestrator. The vulnerability is an Unrestricted Upload of a File with a Dangerous Type in the DLP ePO extension prior to version 11.5.3, caused by lack of sanity checking. The impact, as ...
CVE-2014-7302
creationtimestamp| type| source ---|---|--- 2020-01-27 21:38:41+00:00| seen| https://t.me/cveNotify/469...
CVE-2014-7302
The CVE-2014-7302 entry concerns SGI Tempo on SGI ICE-X systems where the /opt/sgi/sgimc/bin/vx binary has insecure SUID root permissions (example: -rwsr-sr-x 1 root root). This allows low-privileged local users to escalate to root by executing vx and applying its permission-changing capabilities...
Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2019-1799)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Tiki Wiki CMS Groupware Multiple Vulnerabilities (Feb 2018)
Tiki Wiki CMS Groupware is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2018-7302
CVE-2018-7302 affects Tiki Wiki CMS Groupware 17.1. The issue arises when a PNG upload is actually SVG content, enabling cross-site scripting (XSS). Data from multiple sources confirms the vulnerability, with the impact described as XSS and the CVSS vectors indicating network attack with low to m...
SUSE SLES12 Security Update : CaaS Platform 2.0 images (SUSE-SU-2018:0053-1)
The Docker images provided with SUSE CaaS Platform 2.0 have been updated to include the following updates: binutils : - Update to version 2.29 - 18750 bsc1030296 CVE-2014-9939 - 20891 bsc1030585 CVE-2017-7225 - 20892 bsc1030588 CVE-2017-7224 - 20898 bsc1030589 CVE-2017-7223 - 20905 bsc1030584...
