Lucene search
+L

38 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:44 p.m.•26 views

CVE-2026-8148

NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM via registry manipulation due to improper privilege checks...

7.8CVSS5.4AI score0.00137EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/05/08 4:36 a.m.•68 views

CVE-2026-8148

NAVER MYBOX Explorer for Windows before 3.0.11.160 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM via registry manipulation due to improper privilege checks...

0.00137EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/01/20 12:00 a.m.•9 views

MiracleLinux 9 : git-lfs-3.4.1-2.el9_4 (AXSA:2024-8148:03)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-8148:03 advisory. golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS CVE-2023-45288 golang: net/http/cookiejar: incorrect forwarding of...

7.5CVSS6.9AI score0.91969EPSS
SaveExploits1References5
Circl
Circl
•added 2025/12/05 9:33 p.m.•20 views

CVE-2025-8148

creationtimestamp| type| source ---|---|--- 2025-12-05 21:33:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7bgt7nram2x...

4.2CVSS5.8AI score0.00167EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/09/10 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2014-8148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The default D-Bus access control rule in Midgard2 10.05.7.1 allows local users to send arbitrary method calls or signals to any process on the system bus and...

7.2CVSS6.1AI score0.00428EPSS
SaveExploits0References2
OSV
OSV
•added 2025/08/14 6:52 p.m.•6 views

MAL-2025-8148 Malicious code in @kollusietea/culpa-officiis-nulla (npm)

The package @kollusietea/culpa-officiis-nulla was found to contain malicious code...

7.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/22 4:50 p.m.•23 views

CVE-2020-8148

UniFi Cloud Key firmware 1.1.6 contains a vulnerability that enables an attacker being able to change a device hostname by sending a malicious API request. This affects Cloud Key gen2 and Cloud Key gen2 Plus...

5.3CVSS6.8AI score0.01054EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 8:53 a.m.•18 views

CVE-2019-8148

A stored cross-site scripting XSS vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin user can inject arbitrary JavaScript code when creating a content page via page builder...

4.8CVSS5.3AI score0.00552EPSS
SaveExploits0References1
Circl
Circl
•added 2024/10/04 9:03 p.m.•18 views

CVE-2024-8148

creationtimestamp| type| source ---|---|--- 2024-10-04 21:03:05+00:00| seen| https://t.me/cvedetector/6996...

6.1CVSS4.8AI score0.00322EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/04 5:11 p.m.•39 views

CVE-2024-8148 BUG-000168624 - Unvalidated redirect in Portal for ArcGIS. (11.2, 11.1, 10.9.1. and 10.8.1)

There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 11.2 and below that may allow a remote, unauthenticated attacker to craft a URL that could redirect a victim to an arbitrary website, simplifying phishing attacks...

6.1CVSS0.00322EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/04 5:11 p.m.•82 views

CVE-2024-8148

CVE-2024-8148 describes an unvalidated redirect vulnerability in Esri Portal for ArcGIS, affecting versions 11.2 and below. The root cause relates to improper handling of target URLs, allowing a remote, unauthenticated attacker to craft a link that redirects a victim to an arbitrary website, pote...

6.1CVSS6.5AI score0.00322EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/10/04 5:11 p.m.•18 views

CVE-2024-8148 BUG-000168624 - Unvalidated redirect in Portal for ArcGIS. (11.2, 11.1, 10.9.1. and 10.8.1)

There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 11.2 and below that may allow a remote, unauthenticated attacker to craft a URL that could redirect a victim to an arbitrary website, simplifying phishing attacks...

6.1CVSS6.5AI score0.00322EPSS
SaveExploits0References1
Circl
Circl
•added 2024/02/04 3:21 p.m.•25 views

CVE-2019-8148

creationtimestamp| type| source ---|---|--- 2024-02-04 15:21:15+00:00| seen| https://t.me/ctinow/178851...

4.8CVSS4.9AI score0.00552EPSS
SaveExploits0References1
Mend
Mend
•added 2022/08/18 12:00 a.m.•2 views

MSC-2022-8148

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Exfiltrating sensitive user system data –...

8.7CVSS5.8AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2021/03/01 11:08 p.m.•19 views

CVE-2016-8148

...

SaveExploits0
CVE
CVE
•added 2021/03/01 11:08 p.m.•53 views

CVE-2016-8148

CVE-2016-8148 is rejected/not used and does not represent an active vulnerability entry.

6.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2020/11/05 12:00 a.m.•2 views

PT-2020-8148

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The candidate number has been withdrawn by its CNA. No further information is available about the issue. Recommendations: At the moment, there is no information about a newer...

SaveExploits0References4
attackerkb
attackerkb
•added 2020/04/13 2:15 p.m.•12 views

CVE-2020-8148

UniFi Cloud Key firmware 1.1.6 contains a vulnerability that enables an attacker being able to change a device hostname by sending a malicious API request. This affects Cloud Key gen2 and Cloud Key gen2 Plus...

5.3CVSS5.7AI score0.01054EPSS
SaveExploits0References3
CVE
CVE
•added 2020/04/13 1:32 p.m.•83 views

CVE-2020-8148

CVE-2020-8148 affects Ubiquiti UniFi Cloud Key Gen2 and Gen2 Plus prior to firmware version 1.1.6. The issue is described as an authorization/unauthorized API request vulnerability that enables an attacker to change a device hostname by sending a crafted API request. Impact is limited to hostname...

5.3CVSS5.1AI score0.01054EPSS
SaveExploits0References2Affected Software2
CVE
CVE
•added 2019/11/05 11:34 p.m.•80 views

CVE-2019-8148

CVE-2019-8148 affects Magento 2.3 up to versions prior to 2.3.3 or 2.3.2-p1. The vulnerability is a stored cross-site scripting (XSS) flaw where an authenticated admin user can inject arbitrary JavaScript code when creating a content page via the page builder. This could result in script executio...

4.8CVSS4.8AI score0.00552EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder