22 matches found
CVE-2026-7887
For Concrete CMS 9.5.0 and below, OAuth 2.0 Authorization-Code Handler Bypasses Account Status. A user with uIsActive=0 suspended, banned, terminated employee can still authenticate via OAuth and receive valid API tokens. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score o...
MINI-RQJV-7887-VCQJ
Bulletin has no description...
Ubuntu Pro 24.04 LTS Realtime Kernel : Linux kernel (Raspberry Pi Real-time) vulnerabilities (USN-7887-1)
The remote Ubuntu Pro 24.04 LTS Realtime Kernel host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7887-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This upda...
Linux Distros Unpatched Vulnerability : CVE-2017-7887
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dolibarr ERP/CRM 4.0.4 has XSS in doli/societe/list.php via the sall parameter. CVE-2017-7887 Note that Nessus relies on the presence of the package as reported...
CVE-2025-7887
A vulnerability has been found in Zavy86 WikiDocs up to 1.0.78 and classified as problematic. This vulnerability affects unknown code of the file template.inc.php. The manipulation of the argument path leads to cross site scripting. The attack can be initiated remotely. The exploit has been...
CVE-2025-7887
creationtimestamp| type| source ---|---|--- 2025-07-20 15:15:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lufrf34fnk2t...
CVE-2025-7887 Zavy86 WikiDocs template.inc.php cross site scripting
A vulnerability has been found in Zavy86 WikiDocs up to 1.0.78 and classified as problematic. This vulnerability affects unknown code of the file template.inc.php. The manipulation of the argument path leads to cross site scripting. The attack can be initiated remotely. The exploit has been...
CVE-2025-7887 Zavy86 WikiDocs template.inc.php cross site scripting
A vulnerability has been found in Zavy86 WikiDocs up to 1.0.78 and classified as problematic. This vulnerability affects unknown code of the file template.inc.php. The manipulation of the argument path leads to cross site scripting. The attack can be initiated remotely. The exploit has been...
LimeSurvey < 6.3.0 DoS Vulnerability
LimeSurvey is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2024-7887
creationtimestamp| type| source ---|---|--- 2024-08-17 12:17:48+00:00| seen| https://t.me/cvedetector/3388...
CVE-2024-7887 LimeSurvey File Upload index.php denial of service
A vulnerability was found in LimeSurvey 6.3.0-231016 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php of the component File Upload. The manipulation of the argument size leads to denial of service. The attack may be launched remotely. The...
CVE-2024-7887 LimeSurvey File Upload index.php denial of service
A vulnerability was found in LimeSurvey 6.3.0-231016 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php of the component File Upload. The manipulation of the argument size leads to denial of service. The attack may be launched remotely. The...
CVE-2024-7887
CVE-2024-7887 affects LimeSurvey 6.3.0-231016. The vulnerability resides in the File Upload component, specifically the /index.php handling, where manipulation of the size argument can cause a denial of service. The issue is exploitable remotely and, per connected sources, the exploit has been di...
PT-2023-7887 · Linux +9 · Linux Kernel +9
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.7-rc5 Linux kernel versions 5.6 through 5.10.203 Linux kernel versions 5.6 through 5.15.142 Linux kernel versions 5.6 through 6.1.67 Linux kernel versions 5.6 through 6.6.6 Description: A use-after-free...
RHEL 7 : linux-firmware (RHSA-2022:7887)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:7887 advisory. The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Security Fixes: hardware: buffer...
CVE-2019-7887
A reflected cross-site scripting vulnerability exists in the admin panel of Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 when the feature that adds a secret key to the Admin URL is...
CVE-2019-7887
CVE-2019-7887 is a reflected cross-site scripting vulnerability in the Magento family admin panels when the Admin URL secret key feature is disabled. Affected products and versions include Magento Open Source prior to 1.9.4.2, Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magen...