Lucene search
K

26 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/20 12:0 a.m.6 views

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-8280-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8280-1 advisory. It was discovered that the Linux kernel algifaead module did not properly handle in-place cryptographic operations. This flaw is known as Cop...

9.8CVSS6.5AI score0.02235EPSS
Exploits225References7
Wolfi
Wolfi
added 2026/05/18 7:48 p.m.10 views

CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-pages...

6.5CVSS5.8AI score0.00064EPSS
Exploits0
Chainguard
Chainguard
added 2026/05/18 7:17 p.m.8 views

CVE-2026-8280 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-pages...

6.5CVSS5.8AI score0.00064EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/05/14 12:0 a.m.12 views

GitLab 8.3 < 18.9.7 / 18.10 < 18.10.6 / 18.11 < 18.11.3 (CVE-2026-8280)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Allocation of Resources Without Limits or Throttling in GitLab CVE-2026-8280 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version numbe...

6.5CVSS5.8AI score0.00064EPSS
Exploits0References5
Circl
Circl
added 2025/09/12 7:36 a.m.4 views

CVE-2025-8280

creationtimestamp| type| source ---|---|--- 2025-09-12 07:36:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lymqv4v65w2c...

5.8CVSS4.8AI score0.00059EPSS
Exploits1References1
NVD
NVD
added 2025/09/12 6:15 a.m.2 views

CVE-2025-8280

The Contact Form 7 reCAPTCHA WordPress plugin through 1.2.0 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

5.8CVSS0.00059EPSS
Exploits1References1
OSV
OSV
added 2025/09/12 6:15 a.m.0 views

CVE-2025-8280

The Contact Form 7 reCAPTCHA WordPress plugin through 1.2.0 does not escape the $SERVER'REQUESTURI' parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers...

5.8CVSS5.8AI score0.00059EPSS
Exploits1References1
Circl
Circl
added 2024/09/13 9:18 p.m.0 views

CVE-2024-8280

creationtimestamp| type| source ---|---|--- 2024-09-13 21:18:43+00:00| seen| https://t.me/cvedetector/5632...

7.2CVSS7AI score0.0041EPSS
Exploits0References1
CVE
CVE
added 2024/09/13 5:27 p.m.49 views

CVE-2024-8280

CVE-2024-8280 describes an input validation weakness in Lenovo’s XClarity Controller (XCC) that could allow a valid, authenticated XCC user with elevated privileges to perform command injection or cause a recoverable denial of service by processing a specially crafted file. The vulnerability is t...

7.2CVSS7.4AI score0.0041EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2022/05/13 1:20 a.m.22 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8280, CVE-2018-8286,...

7.6CVSS7AI score0.18649EPSS
Exploits0References7Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/13 1:20 a.m.22 views

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8280, CVE-2018-8286,...

7.6CVSS7AI score0.18649EPSS
Exploits0References7Affected Software1
Circl
Circl
added 2021/01/07 12:39 a.m.0 views

CVE-2020-8280

creationtimestamp| type| source ---|---|--- 2021-01-07 00:39:36+00:00| seen| https://t.me/cibsecurity/21717...

5.4CVSS5.5AI score0.00217EPSS
Exploits1References1
CVE
CVE
added 2021/01/06 8:59 p.m.188 views

CVE-2020-8280

CVE-2020-8280 — Nextcloud Contacts 3.4.0 suffers from a missing file type check that lets an attacker upload SVG files with a PNG extension to trigger cross-site scripting (XSS) when viewing a contact image. The issue is documented across multiple feeds (NVD/NSS, CNVD, Red Hat, OSV, CNVD) and is ...

5.4CVSS5.2AI score0.00217EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2019/03/09 12:0 a.m.18 views

CVE-2019-8280

UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1204...

9.6AI score0.01643EPSS
Exploits0References6
CVE
CVE
added 2019/03/09 12:0 a.m.58 views

CVE-2019-8280

CVE-2019-8280 affects UltraVNC revision 1203, where an out-of-bounds access vulnerability in the VNC client inside the RAW decoder can lead to code execution. The flaw is exploitable over the network and has been fixed in revision 1204. Public sources (NVD/NIST, CVE List, and related vendor advis...

9.8CVSS9.4AI score0.01643EPSS
Exploits0References6Affected Software1
NVD
NVD
added 2018/07/11 12:29 a.m.17 views

CVE-2018-8280

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8286, CVE-2018-8290,...

7.6CVSS7.4AI score0.18649EPSS
Exploits0References3
Prion
Prion
added 2018/07/11 12:29 a.m.19 views

Remote code execution

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8280, CVE-2018-8290,...

7.6CVSS7.4AI score0.18649EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2018/07/11 12:0 a.m.67 views

CVE-2018-8280

CVE-2018-8280 and related Chakra memory-corruption issues affect Microsoft Edge and ChakraCore. The vulnerability arises from how the Chakra scripting engine handles objects in memory, enabling remote code execution. The connected advisories (GHSA entries and NVD/CVE records) confirm a Chakra mem...

7.6CVSS6.4AI score0.18649EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2017/09/21 3:0 p.m.43 views

CVE-2017-8280

CVE-2017-8280 affects Qualcomm WLAN driver in Android CAF builds using the Linux kernel. The issue arises during the wlan calibration data store/retrieve operation, where a race condition can lead to a memory leak and a buffer overflow during context switches. In scope here are Qualcomm products ...

7CVSS7.2AI score0.00045EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2017/05/11 2:1 p.m.9 views

CVE-2014-8280

...

Exploits0
Rows per page
Query Builder