MAL-2026-8078 Malicious code in m8405v0nhw (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2026-8078 Fix stored XSS in global settings change log

Stored cross-site scripting in the global settings change log in Checkmk 2.5.0p5, 2.4.0p31, 2.3.0p48, and all 2.2.0 versions allows an administrator who can change global settings to store malicious HTML or JavaScript in changelog messages that executes in other users' browsers when they view the...

CVE-2024-8078

creationtimestamp| type| source ---|---|--- 2024-08-22 23:34:13+00:00| seen| https://t.me/cvedetector/3959...

CVE-2024-8078

A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862B20230228. It has been declared as critical. This vulnerability affects the function setTracerouteCfg. The manipulation leads to buffer overflow. The attack can be initiated remotely. NOTE: The vendor was contacted early about this...

Rocky Linux 9 : flac (RLSA-2022:8078)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:8078 advisory. - In appendtoverifyfifointerleaved of streamencoder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local informatio...

Oracle Linux 9 : flac (ELSA-2022-8078)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8078 advisory. 1.3.3-10 - handle end-of-stream when encoding with verification CVE-2021-0561 Tenable has extracted the preceding description block directly from the Oracle Lin...

SUSE: Security Advisory (SUSE-SU-2016:1457-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-8078

CVE-2019-8078 affects Adobe Experience Manager 6.x specifically 6.2, 6.3 and 6.4. The vulnerability is a reflected cross-site scripting issue that could lead to sensitive information disclosure. Remediation per public advisories is to apply the APSB19-48 updates, upgrading to affected fixed versi...

CVE-2018-8078

CVE-2018-8078 affects YzmCMS 3.7, where a Stored XSS vulnerability exists in the title parameter of advertisement/adver/edit.html. The root cause is unescaped user input in the title field, enabling arbitrary script/HTML injection. Documented impact is XSS with low to medium severity depending on...

CVE-2016-8078

CVE-2016-8078 is rejected/not used (as explicitly stated in the Initial Description).

CVE-2016-8078

...

CVE-2017-8078

The TP-Link TL-SG108E (firmware 1.1.2 Build 20141017 Rel.50749) has a remote unauthenticated upgrade process vulnerability: httpupg.cgi with parameter cmd can be requested without authentication. This affects TL-SG108E 1.0. Description does not provide exploitation status or remediation. Monitori...

MGASA-2016-0045 Updated cyrus-imapd packages fix security vulnerability

Cyrus-imapd versions 2.4.18 and earlier are vulnerable to potential integer and buffer overflows CVE-2015-8077, CVE-2015-8078...

Security fix for the ALT Linux 7 package cyrus-imapd version 2.4.18-alt1.M70P.1

2.4.18-alt1.M70P.1 built Jan. 7, 2016 Sergey Y. Afonin in task 155557 Dec. 15, 2015 Sergey Y. Afonin - updated to git 20151026 of "cyrus-imapd-2.4" branch CVE-2015-8077, CVE-2015-8078...

Security fix for the ALT Linux 8 package cyrus-imapd version 2.5.7-alt1

Dec. 11, 2015 Sergey Y. Afonin 2.5.7-alt1 - 2.5.7 CVE-2015-8077, CVE-2015-8078; Closes: 31611 - added tzdata to "Requires" Closes: 31612...

Security fix for the ALT Linux 9 package cyrus-imapd version 2.5.7-alt1

Dec. 11, 2015 Sergey Y. Afonin 2.5.7-alt1 - 2.5.7 CVE-2015-8077, CVE-2015-8078; Closes: 31611 - added tzdata to "Requires" Closes: 31612...

CVE-2015-8078

Integer overflow in the indexurlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to urlfetch range checks and the sectionoffset variable. NOTE: this vulnerability exists because of an incomplete fix for...

CVE-2015-8078

CVE-2015-8078 affects Cyrus IMAPd (core server) via an integer overflow in index_urlfetch (imap/index.c). Affected are Cyrus IMAPd 2.3.19, 2.4.18, and 2.5.6, with exploitation related to urlfetch range checks and the section_offset variable, and it notes this was a follow-on of a prior fix for CV...

cyrus-imapd -- integer overflow in the start_octet addition

Cyrus IMAP 2.5.7 Release Note states: CVE-2015-8077, CVE-2015-8078: protect against integer overflow in urlfetch range checks...

CVE-2014-8078

Cross-site scripting XSS vulnerability in the Print aka Printer, e-mail and PDF versions module 6.x-1.x before 6.x-1.19, 7.x-1.x before 7.x-1.3, and 7.x-2.x before 7.x-2.0 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors...