Lucene search
K

44 matches found

Circl
Circl
added 2026/05/27 9:53 a.m.3 views

CVE-2026-8042

creationtimestamp| type| source ---|---|--- 2026-05-27 09:53:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmtaf7ne3f2e...

6.4CVSS5.8AI score0.00032EPSS
Exploits0References1
CVE
CVE
added 2026/05/27 7:45 a.m.8 views

CVE-2026-8042

The CVE concerns the WordPress plugin “Github Shortcode.” All versions up to 0.1 are affected by a Stored Cross-Site Scripting (Stored XSS) in the github shortcode via the repo attribute due to insufficient input sanitization and output escaping. An authenticated attacker with Contributor-level a...

6.4CVSS6AI score0.00032EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/08/21 9:23 p.m.2 views

CVE-2025-8042

Firefox for Android allowed a sandboxed iframe without the allow-downloads attribute to start downloads. This vulnerability was fixed in Firefox 141...

9.8CVSS5.8AI score0.00093EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2025/08/19 9:15 p.m.2 views

CVE-2025-8042

Firefox for Android allowed a sandboxed iframe without the allow-downloads attribute to start downloads. This vulnerability was fixed in Firefox 141...

9.8CVSS5.8AI score0.00093EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/08/19 8:52 p.m.7 views

CVE-2025-8042 Sandboxed iframe could start downloads

Firefox for Android allowed a sandboxed iframe without the allow-downloads attribute to start downloads. This vulnerability was fixed in Firefox 141...

0.00093EPSS
Exploits0References2
CVE
CVE
added 2025/08/19 8:52 p.m.16 views

CVE-2025-8042

CVE-2025-8042 affects Mozilla Firefox for Android up to version 141. A sandboxed iframe without the allow-downloads attribute could initiate downloads, enabling information disclosure and potentially arbitrary code execution. CVSSv3.1 is high/critical with network vector, no user interaction. Rem...

9.8CVSS5.8AI score0.00093EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added 2025/08/19 8:52 p.m.5 views

CVE-2025-8042

Firefox for Android allowed a sandboxed iframe without the allow-downloads attribute to start downloads. This vulnerability was fixed in Firefox 141...

9.8CVSS5.2AI score0.00093EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/08/06 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-8042

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Firefox for Android allowed a sandboxed iframe without the allow-downloads attribute to start downloads. This vulnerability was fixed in Firefox 141...

9.8CVSS5.8AI score0.00093EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/07/22 12:0 a.m.4 views

Mozilla Firefox < 141.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 141.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-56 advisory. - Memory safety bugs present in Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory...

9.8CVSS8.4AI score0.00781EPSS
Exploits1References20
Circl
Circl
added 2024/09/09 6:9 p.m.1 views

CVE-2024-8042

creationtimestamp| type| source ---|---|--- 2024-09-09 18:09:31+00:00| seen| https://t.me/cvedetector/5107...

3.1CVSS4.8AI score0.0002EPSS
Exploits0References1
CVE
CVE
added 2021/03/01 11:7 p.m.35 views

CVE-2016-8042

This CVE-2016-8042 entry is rejected/not used as stated in the initial description.

6.9AI score
Exploits0
Cvelist
Cvelist
added 2021/03/01 11:7 p.m.8 views

CVE-2016-8042

...

Exploits0
0day.today
0day.today
added 2019/12/11 12:0 a.m.658 views

Adobe Acrobat Reader DC - Heap-Based Memory Corruption due to Malformed TTF Font Exploit

We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Windows, when opening a malformed PDF file: --- cut --- First chance exceptions are reported before any exception handling. This exception may be expected and handled. eax=707779e0...

9.8CVSS9.6AI score0.39724EPSS
Exploits3
exploitpack
exploitpack
added 2019/12/11 12:0 a.m.46 views

Adobe Acrobat Reader DC - Heap-Based Memory Corruption due to Malformed TTF Font

Adobe Acrobat Reader DC - Heap-Based Memory Corruption due to Malformed TTF Font We have observed the following access violation exception in the latest version of Adobe Acrobat Reader DC for Windows, when opening a malformed PDF file: --- cut --- First chance exceptions are reported before any...

7.5CVSS9.5AI score0.39724EPSS
Exploits3
CVE
CVE
added 2019/08/20 7:56 p.m.144 views

CVE-2019-8042

CVE-2019-8042 affects Adobe Acrobat and Reader (versions listed in the Initial document) due to a heap overflow vulnerability that could lead to arbitrary code execution on successful exploitation. Public sources in the Connected documents corroborate a memory-corruption vector in these products;...

9.8CVSS9.6AI score0.39724EPSS
Exploits3References1Affected Software2
Tenable Nessus
Tenable Nessus
added 2019/08/16 12:0 a.m.48 views

Adobe Reader < 2015.006.30499 / 2017.011.30144 / 2019.012.20036 Multiple Vulnerabilities (APSB19-41)

The version of Adobe Reader installed on the remote Windows host is a version prior to 2015.006.30499, 2017.011.30144, or 2019.012.20036. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier,...

10CVSS7.7AI score0.46202EPSS
Exploits13References83
OpenVAS
OpenVAS
added 2019/08/14 12:0 a.m.44 views

Adobe Acrobat 2017 Security Updates (APSB19-41) - Windows

Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

10CVSS8.7AI score0.46202EPSS
Exploits13References1
CVE
CVE
added 2018/07/18 3:0 p.m.54 views

CVE-2018-8042

Affected software/versions: Apache Ambari 2.5.0–2.6.2. Vulnerability: passwords for Hadoop credential stores are exposed in Ambari Agent informational log messages when the credential store feature is enabled for eligible services (e.g., Hive, Oozie). This constitutes an information disclosure vu...

8.1CVSS8AI score0.00651EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2018/01/03 3:0 p.m.26 views

CVE-2017-8042

CVE-2017-8042 entry is rejected/not used per the initial description.

7.3AI score
Exploits0
Cvelist
Cvelist
added 2018/01/03 3:0 p.m.8 views

CVE-2017-8042

...

Exploits0
Rows per page
Query Builder