52 matches found
CVE-2026-8108
The CVE concerns Fuji Tellus: its installer adds a kernel driver that grants all users read/write permissions, enabling local privilege escalation. The vulnerability enables an attacker to elevate from user to SYSTEM, with potential impact including privilege abuse and disruption of operations wi...
CVE-2026-8108
creationtimestamp| type| source ---|---|--- 2026-05-12 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-132-01 2026-05-13 02:05:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlp7pio24l2c 2026-05-13 03:03:45+00:00| seen|...
CVE-2025-8108
creationtimestamp| type| source ---|---|--- 2025-11-11 09:46:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5du4g2mnd2q...
CVE-2024-8108
The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alignment' parameter in all versions up to, and including, 2.01 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...
CVE-2019-8108
Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can manipulate session validation setting for a storefront that leads to insecure authentication and session management...
WordPress Share This Image Plugin <= 2.01 is vulnerable to Cross Site Scripting (XSS)
Software Share This Image Type Plugin Vulnerable versions = 2.01 Fixed in 2.02 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8108 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ce0f588ce2a5 Credits Francesco Carlucci Requir...
CVE-2024-8108
creationtimestamp| type| source ---|---|--- 2024-08-31 11:42:49+00:00| seen| https://t.me/cvedetector/4569...
CVE-2024-8108 Share This Image <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter
The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alignment' parameter in all versions up to, and including, 2.01 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...
CVE-2024-8108 Share This Image <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter
The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alignment' parameter in all versions up to, and including, 2.01 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...
CVE-2019-8108
creationtimestamp| type| source ---|---|--- 2024-02-04 12:16:51+00:00| seen| https://t.me/ctinow/178806...
Malicious code in wlwz-2312-8108 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d563fc2ce6141a32b52e9acdd16b1bb909b5a54b7cef5a86b2b4adbb7dfdf5c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE CVE-2017-8108
Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a symlink attack on a temporary file...
Mageia: Security Advisory (MGASA-2014-0545)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-8108
CVE-2016-8108 is rejected/not used; this entry does not represent an active vulnerability.
CVE-2020-8108
Improper Authentication vulnerability in Bitdefender Endpoint Security for Mac allows an unprivileged process to restart the main service and potentially inject third-party code into a trusted process. This issue affects: Bitdefender Endpoint Security for Mac versions prior to 4.12.80...
CVE-2020-8108
The CVE concerns Bitdefender Endpoint Security for Mac, where an improper authentication flaw lets an unprivileged local process restart the main service and potentially inject third‑party code into a trusted process. Affected versions are Bitdefender Endpoint Security for Mac prior to 4.12.80. T...
CVE-2019-8108
Magento reports an Insecure Authentication and Session Management vulnerability affecting Magento 2.2.x before 2.2.10 and 2.3.x before 2.3.3 (or 2.3.2-p1). An authenticated user can manipulate the storefront’s session validation setting, enabling insecure authentication/session handling. Public r...
CVE-2018-8108
CVE-2018-8108 affects the bui library’s select component. The issue is an XSS vulnerability caused by escaping text that has already been escaped, demonstrated by workGroupList text. Affected: bui’s select component (front-end), with roots in the escape operation being applied redundantly. Impact...
Amazon Linux AMI : lynis (ALAS-2017-847)
Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a symlink attack on a temporary file. CVE-2017-8108 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux AMI...