Lucene search
+L

52 matches found

CVE
CVE
added 2026/05/12 10:29 p.m.38 views

CVE-2026-8108

The CVE concerns Fuji Tellus: its installer adds a kernel driver that grants all users read/write permissions, enabling local privilege escalation. The vulnerability enables an attacker to elevate from user to SYSTEM, with potential impact including privilege abuse and disruption of operations wi...

7.8CVSS5.8AI score0.00146EPSS
SaveExploits0References2Affected Software1
Circl
Circl
added 2026/05/12 10:0 a.m.55 views

CVE-2026-8108

creationtimestamp| type| source ---|---|--- 2026-05-12 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-132-01 2026-05-13 02:05:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlp7pio24l2c 2026-05-13 03:03:45+00:00| seen|...

7.8CVSS5.8AI score0.00146EPSS
SaveExploits0References3
Circl
Circl
added 2025/11/11 9:46 a.m.6 views

CVE-2025-8108

creationtimestamp| type| source ---|---|--- 2025-11-11 09:46:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5du4g2mnd2q...

6.7CVSS5.7AI score0.00129EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:19 a.m.10 views

CVE-2024-8108

The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alignment' parameter in all versions up to, and including, 2.01 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

6.4CVSS5.8AI score0.00382EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:52 a.m.9 views

CVE-2019-8108

Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can manipulate session validation setting for a storefront that leads to insecure authentication and session management...

6.5CVSS6.8AI score0.01168EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/09/02 12:0 a.m.12 views

WordPress Share This Image Plugin <= 2.01 is vulnerable to Cross Site Scripting (XSS)

Software Share This Image Type Plugin Vulnerable versions = 2.01 Fixed in 2.02 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8108 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ce0f588ce2a5 Credits Francesco Carlucci Requir...

6.4CVSS5.8AI score0.00382EPSS
SaveExploits0References3Affected Software1
Circl
Circl
added 2024/08/31 11:42 a.m.9 views

CVE-2024-8108

creationtimestamp| type| source ---|---|--- 2024-08-31 11:42:49+00:00| seen| https://t.me/cvedetector/4569...

6.4CVSS4.8AI score0.00382EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/31 8:35 a.m.9 views

CVE-2024-8108 Share This Image <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter

The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alignment' parameter in all versions up to, and including, 2.01 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

6.4CVSS5.8AI score0.00382EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2024/08/31 8:35 a.m.28 views

CVE-2024-8108 Share This Image <= 2.01 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter

The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alignment' parameter in all versions up to, and including, 2.01 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

6.4CVSS0.00382EPSS
SaveExploits0References6
Circl
Circl
added 2024/02/04 12:16 p.m.8 views

CVE-2019-8108

creationtimestamp| type| source ---|---|--- 2024-02-04 12:16:51+00:00| seen| https://t.me/ctinow/178806...

6.5CVSS6.3AI score0.01168EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/01/24 8:23 p.m.3 views

Malicious code in wlwz-2312-8108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d563fc2ce6141a32b52e9acdd16b1bb909b5a54b7cef5a86b2b4adbb7dfdf5c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 4:46 a.m.4 views

SUSE CVE-2017-8108

Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a symlink attack on a temporary file...

7.8CVSS7.3AI score0.00426EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.30 views

Mageia: Security Advisory (MGASA-2014-0545)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS9.3AI score0.1076EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2021/03/01 11:7 p.m.13 views

CVE-2016-8108

...

SaveExploits0
CVE
CVE
added 2021/03/01 11:7 p.m.41 views

CVE-2016-8108

CVE-2016-8108 is rejected/not used; this entry does not represent an active vulnerability.

6.9AI score
SaveExploits0
NVD
NVD
added 2020/08/03 12:15 p.m.13 views

CVE-2020-8108

Improper Authentication vulnerability in Bitdefender Endpoint Security for Mac allows an unprivileged process to restart the main service and potentially inject third-party code into a trusted process. This issue affects: Bitdefender Endpoint Security for Mac versions prior to 4.12.80...

8.8CVSS8.3AI score0.00288EPSS
SaveExploits0References1
CVE
CVE
added 2020/08/03 11:55 a.m.53 views

CVE-2020-8108

The CVE concerns Bitdefender Endpoint Security for Mac, where an improper authentication flaw lets an unprivileged local process restart the main service and potentially inject third‑party code into a trusted process. Affected versions are Bitdefender Endpoint Security for Mac prior to 4.12.80. T...

8.8CVSS8.6AI score0.00288EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2019/11/05 10:13 p.m.118 views

CVE-2019-8108

Magento reports an Insecure Authentication and Session Management vulnerability affecting Magento 2.2.x before 2.2.10 and 2.3.x before 2.3.3 (or 2.3.2-p1). An authenticated user can manipulate the storefront’s session validation setting, enabling insecure authentication/session handling. Public r...

6.5CVSS6.7AI score0.01168EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2018/03/14 12:0 p.m.38 views

CVE-2018-8108

CVE-2018-8108 affects the bui library’s select component. The issue is an XSS vulnerability caused by escaping text that has already been escaped, demonstrated by workGroupList text. Affected: bui’s select component (front-end), with roots in the escape operation being applied redundantly. Impact...

6.1CVSS6AI score0.0108EPSS
SaveExploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2017/06/23 12:0 a.m.33 views

Amazon Linux AMI : lynis (ALAS-2017-847)

Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a symlink attack on a temporary file. CVE-2017-8108 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Amazon Linux AMI...

7.8CVSS7.3AI score0.00426EPSS
SaveExploits0References2
Rows per page
Query Builder