42 matches found
JS Help Desk <= 2.8.2 - SQL Injection
JS Help Desk WordPress plugin 2.8.2 contains a SQL injection caused by insufficient escaping and preparation of user-supplied values in 'js-support-ticket-token-tkstatus' cookie, letting unauthenticated attackers extract sensitive database information, exploit requires no authentication. id:...
CVE-2026-7337 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-7337 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-7337
Type Confusion in V8 in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-7337
Type Confusion in V8 in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2025-7337
creationtimestamp| type| source ---|---|--- 2025-09-12 07:55:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lymrxnt22o2c...
CVE-2025-7337
An issue has been discovered in GitLab CE/EE affecting all versions from 7.8 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed an authenticated user with Developer-level access to cause a persistent denial of service affecting all users on a GitLab instance by...
CVE-2025-7337
GitLab CE/EE is affected in versions 7.8 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2. An authenticated user with Developer-level access could upload large files, enabling a persistent denial-of-service for all users on the instance. Root cause: the issue stems from insufficient vali...
CVE-2025-7337
Removed by vendor...
MAL-2025-7337 Malicious code in @crabas0npm/illum-cupiditate-dignissimos (npm)
The package @crabas0npm/illum-cupiditate-dignissimos was found to contain malicious code...
CVE-2024-7337
creationtimestamp| type| source ---|---|--- 2024-08-01 06:13:29+00:00| seen| https://t.me/cvedetector/2204...
RHEL 7 : kernel (RHSA-2022:7337)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:7337 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: a use-after-free in clsroute filter...
Oracle Linux 7 : kernel (ELSA-2022-7337)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-7337 advisory. - debug: lock down kgdb Orabug: 34270798 CVE-2022-21499 - x86/speculation: Add LFENCE to RSB fill sequence Rafael Aquini 2115073 CVE-2022-26373 -...
SUSE: Security Advisory (SUSE-SU-2018:0867-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2018:0811-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-7337
creationtimestamp| type| source ---|---|--- 2020-12-09 12:32:23+00:00| seen| https://t.me/cibsecurity/17583 2020-12-09 12:41:18+00:00| seen| https://t.me/cibsecurity/17603 2020-12-09 13:25:31+00:00| seen| https://t.me/cibsecurity/17623 2020-12-09 14:25:22+00:00| seen| https://t.me/cibsecurity/176...
CVE-2020-7337
Incorrect Permission Assignment for Critical Resource vulnerability in McAfee VirusScan Enterprise VSE prior to 8.8 Patch 16 allows local administrators to bypass local security protection through VSE not correctly integrating with Windows Defender Application Control via careful manipulation of...
CVE-2020-7337 Incorrect Permission Assignment for Critical Resource
Incorrect Permission Assignment for Critical Resource vulnerability in McAfee VirusScan Enterprise VSE prior to 8.8 Patch 16 allows local administrators to bypass local security protection through VSE not correctly integrating with Windows Defender Application Control via careful manipulation of...
CVE-2020-7337
CVE-2020-7337 affects McAfee VirusScan Enterprise (VSE) prior to 8.8 Patch 16, where an incorrect permission assignment for a critical resource enables local administrators to bypass local security protections by manipulating Code Integrity checks tied to Windows Defender Application Control. The...