CVE-2026-8071

creationtimestamp| type| source ---|---|--- 2026-06-10 10:54:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnwkcoeuvv2r 2026-06-10 12:00:21+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mnwnyiff372t 2026-06-10 12:00:36+00:00| seen|...

CVE-2025-8071

CVE-2025-8071 : Mine CloudVod plugin for WordPress has a Stored Cross-Site Scripting (XSS) vulnerability via the audio parameter in all versions up to 2.1.10. The issue arises from insufficient input sanitization and output escaping. It affects authenticated attackers with Contributor-level acces...

WordPress Mine CloudVod plugin <= 2.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via audio Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via audio Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Mine CloudVod versions = 2.1.10...

Mattermost Server 9.5.x < 9.5.8 / 9.8.x < 9.8.3 / 9.9.x < 9.9.2 / 9.10.x < 9.10.1 (MMSA-2024-00374)

The version of Mattermost Server installed on the remote host is prior to 9.5.8, 9.8.3, 9.9.2, or 9.10.1. It is, therefore, affected by a vulnerability as referenced in the MMSA-2024-00374 advisory. - Mattermost versions 9.9.x = 9.9.1, 9.5.x = 9.5.7, 9.10.x = 9.10.0 and 9.8.x = 9.8.2 fail to...

CVE-2024-8071

creationtimestamp| type| source ---|---|--- 2024-08-22 10:10:52+00:00| seen| https://t.me/cvedetector/3901...

CVE-2024-8071 System Role with edit access to permissions can elevate themselves to system admin

Mattermost versions 9.9.x = 9.9.1, 9.5.x = 9.5.7, 9.10.x = 9.10.0 and 9.8.x = 9.8.2 fail to restrict which roles can promote a user as system admin which allows a System Role with edit access to the permissions section of system console to update their role e.g. member to include the managesystem...

CVE-2024-8071 System Role with edit access to permissions can elevate themselves to system admin

Mattermost versions 9.9.x = 9.9.1, 9.5.x = 9.5.7, 9.10.x = 9.10.0 and 9.8.x = 9.8.2 fail to restrict which roles can promote a user as system admin which allows a System Role with edit access to the permissions section of system console to update their role e.g. member to include the managesystem...

CVE-2019-8071

Adobe Download Manager versions 2.0.0.363 have an insecure file permissions vulnerability. Successful exploitation could lead to privilege escalation...

CVE-2019-8071

CVE-2019-8071 pertains to Adobe Download Manager 2.0.0.363 and involves an insecure file-permission vulnerability that could allow privilege escalation. Public sources in the connected documents consistently describe an impact of elevating privileges on affected Windows systems. The root cause is...

CVE-2018-8071

CVE-2018-8071 affects Mautic prior to v2.13.0 and involves a stored cross-site scripting (XSS) vulnerability in the theme config file. The underlying issue is that malicious input placed in the theme config.json could be stored and later rendered, allowing execution of arbitrary scripts in the vi...

CVE-2016-8071

CVE-2016-8071 is a rejected CVE entry and not associated with any vulnerability.

CVE-2016-8071

...

CVE-2017-8071

drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 uses a spinlock without considering that sleeping is possible in a USB HID request callback, which allows local users to cause a denial of service deadlock via unspecified vectors...

UBUNTU-CVE-2017-8071

drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 uses a spinlock without considering that sleeping is possible in a USB HID request callback, which allows local users to cause a denial of service deadlock via unspecified vectors...

CVE-2017-8071

CVE-2017-8071 affects the Linux kernel: the file drivers/hid/hid-cp2112.c in 4.9.x before 4.9.9 uses a spinlock that does not account for sleeping during a USB HID request callback, allowing a local attacker to cause a denial of service via deadlock. The vulnerability is specific to the HID CP210...

CVE-2017-8071

drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 uses a spinlock without considering that sleeping is possible in a USB HID request callback, which allows local users to cause a denial of service deadlock via unspecified vectors...

Design/Logic Flaw

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute...

CVE-2015-8071

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute...

Design/Logic Flaw

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute...

CVE-2015-8071

CVE-2015-8071 is a use-after-free vulnerability affecting Adobe Flash Player and related AIR components. Affected products include Flash Player on Windows/OS X (before 18.0.0.268; 19.x and 20.x before 20.0.0.228) and on Linux (before 11.2.202.554), as well as Adobe AIR before 20.0.0.204 and Adobe...