Linux Distros Unpatched Vulnerability : CVE-2026-8052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Nomad's exec2 task driver prior to 0.1.2 is vulnerable to arbitrary file read and write on the client host as the Nomad process user through a symlink...

CVE-2026-8052

creationtimestamp| type| source ---|---|--- 2026-05-12 23:50:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mloy5xmzq32c...

HashiCorp Nomad’s exec2 task driver vulnerable to a symlink attack

HashiCorp Nomad’s exec2 task driver prior to 0.1.2 is vulnerable to arbitrary file read and write on the client host as the Nomad process user through a symlink attack. This vulnerability CVE-2026-8052 is fixed in version 0.1.2 of the exec2 task driver...

CVE-2026-8052

Summary: CVE-2026-8052 affects HashiCorp Nomad’s exec2 task driver prior to version 0.1.2. The flaw allows arbitrary file read and write on the client host as the Nomad process user via a symlink attack, potentially impacting integrity (I) but not confidentiality or availability per the provided ...

RockyLinux 8 : firefox (RLSA-2026:8052)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:8052 advisory. libpng: libpng: Arbitrary code execution due to use-after-free vulnerability CVE-2026-33416 libpng: libpng: Information disclosure and denial of service...

AlmaLinux 8 : firefox (ALSA-2026:8052)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:8052 advisory. libpng: libpng: Arbitrary code execution due to use-after-free vulnerability CVE-2026-33416 libpng: libpng: Information disclosure and denial of service v...

CVE-2025-8052

creationtimestamp| type| source ---|---|--- 2025-10-20 20:38:54+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115408419667976231 2025-10-20 23:00:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3nwa7kj7g2o...

EUVD-2022-3413

Malicious code in bioql PyPI...

ECHO-C6E4-8052-9DD3

Bulletin has no description...

CVE-2024-8052

creationtimestamp| type| source ---|---|--- 2024-09-17 08:55:32+00:00| seen| https://t.me/cvedetector/5799...

CVE-2024-8052 Review Ratings <= 1.6 - Stored XSS via CSRF

The Review Ratings WordPress plugin through 1.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...

WordPress Review Ratings Plugin <= 1.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software Review Ratings Type Plugin Vulnerable versions = 1.6 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-8052 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 2dc8272f9c64 Credits Daniel Ruf Required...

CVE-2019-8052

CVE-2019-8052 is an out-of-bounds read vulnerability in Adobe Acrobat and Adobe Reader. Affected are versions 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier. Exploitation could lead to information disclosure. The provided documen...

Adobe Reader < 2015.006.30499 / 2017.011.30144 / 2019.012.20036 Multiple Vulnerabilities (APSB19-41)

The version of Adobe Reader installed on the remote Windows host is a version prior to 2015.006.30499, 2017.011.30144, or 2019.012.20036. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier,...

Adobe Acrobat 2017 Security Updates (APSB19-41) - Windows

Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

CVE-2016-8052

...

CVE-2016-8052

This CVE entry is rejected/not used and does not represent an active vulnerability.

CVE-2014-8052

CVE-2014-8052 is rejected/not used and does not represent an active vulnerability entry.

CVE-2014-8052

...

CVE-2017-8384

Craft CMS before 2.6.2976 allows XSS attacks because an array returned by HttpRequestService::getSegments and getActionSegments need not be zero-based. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-8052...