Lucene search
K

30 matches found

RedhatCVE
RedhatCVE
added 2026/05/08 10:25 p.m.5 views

CVE-2026-7904

An out of bounds read flaw was found in the Fonts component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=492350406...

6.5CVSS5.7AI score0.00025EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2026/05/08 2:27 a.m.5 views

SUSE CVE-2026-7904

Out of bounds read in Fonts in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: High...

4.3CVSS5.8AI score0.00025EPSS
Exploits0References3
OSV
OSV
added 2026/05/06 7:16 p.m.1 views

DEBIAN-CVE-2026-7904

Out of bounds read in Fonts in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: High...

4.3CVSS5.8AI score0.00025EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2026/05/06 6:12 p.m.2 views

CVE-2026-7904

Out of bounds read in Fonts in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: High...

4.3CVSS5.8AI score0.00025EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2020-7904

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead of HTTPS. CVE-2020-7904 Note that Nessus relies on the presence...

7.4CVSS7.2AI score0.00003EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/07/22 5:4 p.m.4 views

CVE-2025-7904

A vulnerability, which was classified as critical, was found in itsourcecode Insurance Management System 1.0. This affects an unknown part of the file /insertNominee.php. The manipulation of the argument nomineeid leads to sql injection. It is possible to initiate the attack remotely. The exploit...

8.8CVSS6.7AI score0.00268EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/07/20 5:2 p.m.10 views

CVE-2025-7904 itsourcecode Insurance Management System insertNominee.php sql injection

A vulnerability, which was classified as critical, was found in itsourcecode Insurance Management System 1.0. This affects an unknown part of the file /insertNominee.php. The manipulation of the argument nomineeid leads to sql injection. It is possible to initiate the attack remotely. The exploit...

6.5CVSS0.00268EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2014-7904

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in Skia, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other...

7.5CVSS8.2AI score0.0127EPSS
Exploits0References2
Circl
Circl
added 2024/08/18 12:25 p.m.0 views

CVE-2024-7904

creationtimestamp| type| source ---|---|--- 2024-08-18 12:25:24+00:00| seen| https://t.me/cvedetector/3441...

8.8CVSS6.2AI score0.00145EPSS
Exploits1References1
OSV
OSV
added 2024/08/18 9:15 a.m.2 views

CVE-2024-7904

A vulnerability was found in DedeBIZ 6.3.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file admin/filemanagecontrol.php of the component File Extension Handler. The manipulation of the argument upfile1 leads to unrestricted upload. The attack may be...

8.8CVSS6.2AI score
Exploits0References4
Cvelist
Cvelist
added 2024/08/18 8:31 a.m.17 views

CVE-2024-7904 DedeBIZ File Extension file_manage_control.php unrestricted upload

A vulnerability was found in DedeBIZ 6.3.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file admin/filemanagecontrol.php of the component File Extension Handler. The manipulation of the argument upfile1 leads to unrestricted upload. The attack may be...

6.5CVSS0.00145EPSS
Exploits1References4
OSV
OSV
added 2024/01/24 8:23 p.m.6 views

MAL-2024-885 Malicious code in wlwz-2312-7904 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baca6b336baaa73d4bb4e2e5bffb1ecc4447699637d6d7b60302bcd641132c84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/01/24 8:23 p.m.3 views

Malicious code in wlwz-2312-7904 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baca6b336baaa73d4bb4e2e5bffb1ecc4447699637d6d7b60302bcd641132c84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 5:26 a.m.2 views

SUSE CVE-2014-7904

Buffer overflow in Skia, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

7.5CVSS9.7AI score0.0127EPSS
Exploits0References4
NVD
NVD
added 2020/01/30 6:15 p.m.18 views

CVE-2020-7904

In JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead of HTTPS...

7.4CVSS7.5AI score0.00003EPSS
Exploits0References2
OSV
OSV
added 2020/01/30 6:15 p.m.0 views

UBUNTU-CVE-2020-7904

In JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead of HTTPS...

7.4CVSS7.1AI score0.00003EPSS
Exploits0References2
CVE
CVE
added 2020/01/30 5:1 p.m.53 views

CVE-2020-7904

CVE-2020-7904 affects JetBrains IntelliJ IDEA prior to 2019.3. The issue is that some Maven repositories were accessed over HTTP instead of HTTPS, due to insecure repository access. According to JetBrains’ Security Bulletin Q4 2019, this vulnerability was resolved in IntelliJ IDEA 2019.3. The lin...

7.4CVSS7.4AI score0.00003EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2019/08/02 9:25 p.m.138 views

CVE-2019-7904

CVE-2019-7904 affects Magento versions prior to 2.1.18, 2.2 prior to 2.2.9, and 2.3 prior to 2.3.2, where a low-privileged user could make unauthorized environment configuration changes due to insufficient enforcement of user access controls. Public references indicate a security update exists: M...

6.5CVSS6.4AI score0.00057EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2018/05/24 2:0 p.m.53 views

CVE-2018-7904

Huawei 1288H V5 / 288H V5 (software V100R005C00) expose a JSON injection vulnerability (CVE-2018-7904) in the iBMC server component due to insufficient input validation. An authenticated, remote attacker can inject JSON to modify the administrator password, enabling management privileges on the s...

8.8CVSS8.7AI score0.00128EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2017/01/16 6:59 a.m.15 views

CVE-2016-7904

Cross-site request forgery CSRF vulnerability in CMS Made Simple before 2.1.6 allows remote attackers to hijack the authentication of administrators for requests that create accounts via an admin/adduser.php request...

8CVSS8.2AI score0.00631EPSS
Exploits0References3
Rows per page
Query Builder