12 matches found
MAL-2025-8304 Malicious code in @landmineaknpm2/temporibus-amet-exercitationem (npm)
The package @landmineaknpm2/temporibus-amet-exercitationem was found to contain malicious code...
CVE-2024-8304
creationtimestamp| type| source ---|---|--- 2024-08-29 17:53:32+00:00| seen| https://t.me/cvedetector/4402...
CVE-2024-8304 jpress Template Module edit path traversal
A vulnerability has been found in jpress up to 5.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/template/edit of the component Template Module Handler. The manipulation leads to path traversal. The attack can be launched remotely. The...
Security Updates for Windows Server 2008 (July 2018)
The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists in Windows Domain Name System DNS DNSAPI.dll when it fails to properly handle DNS responses. An attacker who successfully exploited the...
CVE-2018-8304
CVE-2018-8304 is a Windows DNSAPI.dll denial-of-service vulnerability arising from improper handling of DNS responses. Affected: Windows 7, Server 2008/2012/2012 R2, Server 2008 R2, 2016; Windows 8.1/10/10 Servers; DNSAPI denial of service could impact availability. Connected documents confirm th...
KLA11285 Multiple vulnerabilities in Microsoft Windows
Multiple serious vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. Multiple vulnerabilities in Windows kernel ca...
CVE-2017-8304
Accellion FTA devices prior to FTA_9_12_180 are affected by a cross-site scripting vulnerability in courier/1000@/oauth/playground/callback.html triggered by a crafted URI. CNVD/NVD entries corroborate a via-URL XSS in the Accellion FTA web UI, listed as CVE-2017-8304. The provided documents do n...
CVE-2016-8304
CVE-2016-8304 affects Oracle FLEXCUBE Universal Banking (Core) with affected versions 11.3.0, 11.4.0, 12.0.1–12.2.0. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise data security; exploitation requires user interaction. Impact includes unauthorized up...
CVE-2015-8304
CVE-2015-8304 affects Huawei P7 smartphones running software before P7-L07 V100R001C01B606. The root cause is an integer overflow in the device’s subsystem, enabling a crafted application with system or camera permissions to elevate privileges. This could allow a remote attacker with local intera...
Security Advisory - Integer Overflowing Vulnerability in Huawei Smart Phone
An integer overflowing vulnerability exists in a Huawei smart phone. The attacker tricks the user to install a malicious application to obtain system or camera privilege and exploit the vulnerability to obtain the root privilege. Vulnerability ID: HWPSIRT-2015-11025 This vulnerability has been...
CVE-2014-8304
CVE-2014-8304 is an XSS vulnerability in In-Portal CMS 5.2.0 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the next_template parameter to admin/index.php. Affected component: In-Portal CMS web interface (admin panel). Root cause is input handling in nex...