Lucene search
K

53 matches found

RedhatCVE
RedhatCVE
added 2026/05/08 10:39 p.m.5 views

CVE-2026-8008

An inappropriate implementation flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=496426191...

5.4CVSS5.7AI score0.0002EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2026/05/07 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-8008

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to...

5.4CVSS5.8AI score0.0002EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2026/05/06 7:16 p.m.4 views

CVE-2026-8008

Inappropriate implementation in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Low...

5.4CVSS5.8AI score0.0002EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/06 6:13 p.m.32 views

CVE-2026-8008

Inappropriate implementation in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Low...

0.0002EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2026/05/06 6:13 p.m.4 views

CVE-2026-8008

Inappropriate implementation in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Low...

5.4CVSS5.8AI score0.0002EPSS
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-20356

Malware in sbrugna...

6.5CVSS6.6AI score0.0222EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/09/17 12:0 a.m.5 views

Rockwell Automation 1756-EN4TR, 1756-EN4TRXT Improper Handling of Exceptional Conditions (CVE-2025-8008)

A security issue exists in the protected mode of EN4TR devices, where sending specifically crafted messages during a Forward Close operation can cause the device to crash. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

7.1CVSS5.5AI score0.00049EPSS
Exploits0References3
OSV
OSV
added 2025/09/09 1:15 p.m.3 views

CVE-2025-8008

A security issue exists in the protected mode of EN4TR devices, where sending specifically crafted messages during a Forward Close operation can cause the device to crash...

6.5CVSS5.8AI score0.00049EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/09 12:27 p.m.6 views

CVE-2025-8008 Rockwell Automation 1756-ENT2R, EN4TR, EN4TRXT Vulnerability

A security issue exists in the protected mode of EN4TR devices, where sending specifically crafted messages during a Forward Close operation can cause the device to crash...

7.1CVSS6.1AI score0.00049EPSS
Exploits0References1
Circl
Circl
added 2025/08/14 10:0 a.m.3 views

CVE-2025-8008

creationtimestamp| type| source ---|---|--- 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-31 2025-08-14 20:03:12+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lwf53omb5k2y 2025-09-09 15:10:25+00:00| seen|...

7.1CVSS4.8AI score0.00049EPSS
Exploits0References3
Circl
Circl
added 2025/06/02 5:41 p.m.11 views

CVE-2024-8008

creationtimestamp| type| source ---|---|--- 2025-06-02 17:41:54+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqnd3ygwl6d2 2025-06-02 18:15:15+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114615131517406315...

5.2CVSS4.8AI score0.00079EPSS
Exploits0References2
NVD
NVD
added 2025/06/02 5:15 p.m.10 views

CVE-2024-8008

A reflected cross-site scripting XSS vulnerability exists in multiple WSO2 products due to insufficient output encoding in error messages generated by the JDBC user store connection validation request. A malicious actor can inject a specially crafted payload into the request, causing the browser ...

5.2CVSS0.00079EPSS
Exploits0References1
CVE
CVE
added 2025/06/02 4:48 p.m.68 views

CVE-2024-8008

CVE-2024-8008 is a reflected Cross-Site Scripting (XSS) vulnerability in multiple WSO2 products caused by insufficient output encoding in error messages from the JDBC user store connection validation request. An attacker can craft a request payload that triggers JavaScript execution in the victim...

5.2CVSS5.2AI score0.00079EPSS
Exploits0References1Affected Software6
RedhatCVE
RedhatCVE
added 2025/05/22 3:26 p.m.3 views

CVE-2020-27863

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DVA-2800 and DSL-2888A routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dhttpd service, which listens on TCP port 80...

6.5CVSS5.9AI score0.0222EPSS
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/01/24 8:23 p.m.3 views

Malicious code in wlwz-2312-8008 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bc332f6f9feb05f866632a1d6c04a6167c381585faa7507662e4d6ba2de8398 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2021/02/12 12:15 a.m.0 views

CVE-2020-27862

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DVA-2800 and DSL-2888A routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dhttpd service, which listens on TCP port 8008 by...

8.8CVSS7.6AI score0.03368EPSS
Exploits0References2
OSV
OSV
added 2021/02/12 12:15 a.m.0 views

CVE-2020-27863

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DVA-2800 and DSL-2888A routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dhttpd service, which listens on TCP port 80...

6.5CVSS6.5AI score
Exploits0References2
NVD
NVD
added 2021/02/12 12:15 a.m.13 views

CVE-2020-27862

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DVA-2800 and DSL-2888A routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dhttpd service, which listens on TCP port 8008 by...

8.8CVSS0.03368EPSS
Exploits0References2
Prion
Prion
added 2021/02/12 12:15 a.m.10 views

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DVA-2800 and DSL-2888A routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dhttpd service, which listens on TCP port 80...

3.3CVSS6.3AI score0.0222EPSS
Exploits0References2Affected Software2
Prion
Prion
added 2021/02/12 12:15 a.m.17 views

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DVA-2800 and DSL-2888A routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dhttpd service, which listens on TCP port 8008 by...

5.8CVSS8.9AI score0.03368EPSS
Exploits0References2Affected Software2
Rows per page
Query Builder