44 matches found
Unity Linux 20.1060e / 20.1070e Security Update: nodejs-jison (UTSA-2026-016653)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016653 advisory. Insufficient input validation in npm package jison = 0.4.18 may lead to OS command injection attacks. Tenable has extracted the preceding description block directly...
ai.starlake:spark-redshift_2.13 (>=6.5.0 <=6.5.1), ai.starlake:starlake-api_2.13 (>=1.5.8 <=1.5.15) +87 more potentially affected by CVE-2026-8178 via com.amazon.redshift:redshift-jdbc42 (>=2.0.0.3 <=2.2.1)
com.amazon.redshift:redshift-jdbc42 MAVEN version =2.0.0.3, =6.5.0, =1.5.8, =2025.34.3, =0.293, =0.293, =5.0.0, =5.1.0, =1.3.0, =1.19.1891, =0.1.15-alpha, =0.1.15-alpha, =0.1.15-alpha, =3.2.171, =6.0.0-spark3.3, =6.6.0-spark3.5 and more Source cves: CVE-2026-8178 Source advisory:...
RedShift JDBC Driver < 2.2.2 Arbitrary Class Loading (CVE-2026-8178)
The Amazon Redshift JDBC Driver installed on the remote host is prior to 2.2.2. It is, therefore, affected by a flaw that could allow the driver to load and execute arbitrary classes when processing JDBC connection URL parameters. Under certain conditions, an actor able to influence the connectio...
CVE-2026-8178
creationtimestamp| type| source ---|---|--- 2026-05-08 19:52:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mleixssln32q 2026-05-16 17:09:44+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mlydlyyrnc24...
CVE-2025-8178
A vulnerability classified as critical has been found in Tenda AC10 16.03.10.13. Affected is an unknown function of the file /goform/RequestsProcessLaid. The manipulation of the argument device1D leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has be...
CVE-2025-8178 Tenda AC10 RequestsProcessLaid heap-based overflow
A vulnerability classified as critical has been found in Tenda AC10 16.03.10.13. Affected is an unknown function of the file /goform/RequestsProcessLaid. The manipulation of the argument device1D leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has be...
CVE-2025-8178
CVE-2025-8178 affects Tenda AC10 (firmware 16.03.10.13). Root cause: a heap-based buffer overflow in an unknown function of /goform/RequestsProcessLaid triggered by manipulating the device1D argument. Impact: remote attacker could exploit to compromise the device; exploit is public. Affected soft...
Linux Distros Unpatched Vulnerability : CVE-2014-8178
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for...
CVE-2024-8178
The ctlwritebuffer and ctlreadbuffer functions allocated memory to be returned to userspace, without initializing it. Malicious software running in a guest VM that exposes virtioscsi can exploit the vulnerabilities to achieve code execution on the host in the bhyve userspace process, which...
CVE-2019-8178
creationtimestamp| type| source ---|---|--- 2024-01-16 18:43:29+00:00| seen| https://t.me/ctinow/168944...
OESA-2022-2046 nodejs-jison security update
A parser generator with Bison's API. Security Fixes: Insufficient input validation in npm package jison = 0.4.18 may lead to OS command injection attacks.CVE-2020-8178...
OESA-2022-1546 nodejs-jison security update
A parser generator with Bison's API. Security Fixes: Insufficient input validation in npm package jison = 0.4.18 may lead to OS command injection attacks.CVE-2020-8178...
CVE-2014-8178 affecting package moby-buildx 0.4.1-3
CVE-2014-8178 affecting package moby-buildx 0.4.1-3. An upgraded version of the package is available that resolves this issue...
SUSE: Security Advisory (SUSE-SU-2015:1757-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-8178
CVE-2016-8178 is rejected/not used and does not represent an active vulnerability entry.
Security Bulletin: A security vulnerability in Node.js jison affects IBM Cloud Pak for Multicloud Management Managed Service.
Summary A security vulnerability in Node.js jison affects IBM Cloud Pak for Multicloud Management Managed Service. Vulnerability Details CVEID: CVE-2020-8178 DESCRIPTION: Node.js jison could allow a remote attacker to execute arbitrary commands on the system, caused by insufficient input...
Security Bulletin: A security vulnerability in Node.js jison affectsI BM Cloud Automation Manager
Summary A security vulnerability in Node.js jison affectsI BM Cloud Automation Manager Vulnerability Details CVEID: CVE-2020-8178 DESCRIPTION: Node.js jison could allow a remote attacker to execute arbitrary commands on the system, caused by insufficient input validation. By sending a specially...