Lucene search
K

22 matches found

RedhatCVE
RedhatCVE
added 2025/02/04 10:31 p.m.5 views

CVE-2024-8316

In Progress Telerik UI for WPF versions prior to 2024 Q3 2024.3.924, a code execution attack is possible through an insecure deserialization vulnerability...

7.8CVSS7.5AI score0.00199EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/10/04 12:0 a.m.28 views

Telerik UI for WPF < 2024.3.924 Multiple Vulnerabilities

The version of Progress Telerik UI for WPF installed on the remote Windows host is prior to 2024 Q3 2024.3.924. It is, therefore, affected by multiple vulnerabilities: - A command injection attack is possible through improper neutralization of hyperlink elements. CVE-2024-7575 - A code execution...

9.8CVSS6.3AI score0.00599EPSS
Exploits0References6
Circl
Circl
added 2024/09/25 4:49 p.m.2 views

CVE-2024-8316

creationtimestamp| type| source ---|---|--- 2024-09-25 16:49:59+00:00| seen| https://t.me/cvedetector/6314 2025-02-08 23:20:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3893...

7.8CVSS5.7AI score0.00199EPSS
Exploits0References2
CVE
CVE
added 2020/04/14 9:5 p.m.65 views

CVE-2020-8316

CVE-2020-8316 affects Lenovo Vantage before 10.2003.10.0. An authenticated user could read files on the system with elevated privileges (local access). Lenovo’s advisory LEN-30401 provides remediation: update Lenovo Vantage to version 10.2003.10.0 (from the Microsoft Store) and re-launch to compl...

4.4CVSS5.6AI score0.00106EPSS
Exploits0References1Affected Software1
Lenovo
Lenovo
added 2020/04/13 10:56 p.m.20 views

Lenovo Vantage Vulnerabilities - Lenovo Support US

No description provided...

7.8CVSS5.7AI score0.00122EPSS
Exploits0
Lenovo
Lenovo
added 2020/04/13 10:56 p.m.35 views

Lenovo Vantage Vulnerabilities - Lenovo Support US

Lenovo Security Advisory: LEN-30401 Potential Impact: Escalation of Privilege, Improper Verification of Cryptographic Signature, Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2020-8316, CVE-2020-8318, CVE-2020-8319, CVE-2020-8324, CVE-2020-8327 Summary Description: The...

7.2CVSS1.5AI score0.00122EPSS
Exploits0
NVD
NVD
added 2019/02/13 3:29 a.m.14 views

CVE-2019-8316

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...

9CVSS9.1AI score0.01533EPSS
Exploits1References1
CVE
CVE
added 2019/02/13 3:0 a.m.48 views

CVE-2019-8316

CVE-2019-8316 (D-Link DIR-878) involves a command injection in firmware 1.12A1 where any HNAP API function can trigger execution of system commands via untrusted input in the WebFilterURLs field of SetWebFilterSettings, delivered through a crafted /HNAP1 POST request. The vulnerability allows a r...

9CVSS9AI score0.01533EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2018/08/15 5:29 p.m.0 views

CVE-2018-8316

A remote code execution vulnerability exists when Internet Explorer improperly validates hyperlinks before loading executable libraries, aka "Internet Explorer Remote Code Execution Vulnerability." This affects Internet Explorer 11, Internet Explorer 10...

7.5CVSS6.4AI score0.29648EPSS
Exploits0References3
Cvelist
Cvelist
added 2018/08/15 5:0 p.m.17 views

CVE-2018-8316

A remote code execution vulnerability exists when Internet Explorer improperly validates hyperlinks before loading executable libraries, aka "Internet Explorer Remote Code Execution Vulnerability." This affects Internet Explorer 11, Internet Explorer 10...

7.4AI score0.29648EPSS
Exploits0References3
CVE
CVE
added 2018/08/15 5:0 p.m.79 views

CVE-2018-8316

CVE-2018-8316 is a remote code execution flaw in Internet Explorer 10–11, triggered when hyperlinks are not properly validated before loading executable libraries. The underlying issue is improper hyperlink validation, allowing a crafted link to cause code execution on the affected Windows compon...

7.6CVSS7.2AI score0.29648EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2018/08/03 3:29 p.m.11 views

CVE-2017-8316

IntelliJ IDEA XML parser was found vulnerable to XML External Entity attack, an attacker can exploit the vulnerability by implementing malicious code on both Androidmanifest.xml...

7.8CVSS7.6AI score0.00006EPSS
Exploits1References3
CVE
CVE
added 2018/08/03 3:0 p.m.45 views

CVE-2017-8316

This CVE (CVE-2017-8316) affects JetBrains IntelliJ IDEA’s XML parser. The connected documents describe an XML External Entity (XXE) injection vulnerability in the IntelliJ IDEA XML parser, enabling an attacker to exploit via a malicious AndroidManifest.xml to retrieve arbitrary files from a user...

7.8CVSS7.5AI score0.00006EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2017/09/06 9:29 p.m.6 views

CVE-2015-8316

Array index error in LightDM aka Light Display Manager 1.14.3, 1.16.x before 1.16.6 when the XDMCP server is enabled allows remote attackers to cause a denial of service process crash via an XDMCP request packet with no address...

5.9CVSS5.7AI score
Exploits0References6
UbuntuCve
UbuntuCve
added 2017/09/06 9:29 p.m.19 views

CVE-2015-8316

Array index error in LightDM aka Light Display Manager 1.14.3, 1.16.x before 1.16.6 when the XDMCP server is enabled allows remote attackers to cause a denial of service process crash via an XDMCP request packet with no address...

5.9CVSS6.2AI score0.00588EPSS
Exploits0References2
CVE
CVE
added 2017/09/06 9:0 p.m.52 views

CVE-2015-8316

CVE-2015-8316 affects LightDM. The vuln is an array index error in LightDM when the XDMCP server is enabled, allowing a remote attacker to cause a denial of service (process crash). Impact is described for affected versions: LightDM 1.14.3 and 1.16.x before 1.16.6 . The entry notes the attack is ...

5.9CVSS5.6AI score0.00588EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2017/01/27 10:1 p.m.42 views

CVE-2016-8316

CVE-2016-8316 : Vulnerability in the Oracle FLEXCUBE Investor Servicing (Core) component. Affected versions: 12.0.1, 12.0.2, 12.0.4, 12.1.0, 12.3.0. An attacker with network access via HTTP and low privileges can exploit the issue, with user interaction required, to cause unauthorized updates, in...

5.4CVSS5.2AI score0.00204EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2015/12/02 12:0 a.m.14 views

Mageia: Security Advisory (MGASA-2015-0461)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS5.8AI score0.00588EPSS
Exploits0References4
OSV
OSV
added 2015/11/27 11:11 p.m.8 views

MGASA-2015-0461 Updated lightdm packages fix security vulnerability

Updated lightdm corrects a possible denial of service attack CVE-2015-8316...

5.9CVSS5.7AI score0.00588EPSS
Exploits0References3
CVE
CVE
added 2014/10/16 7:0 p.m.36 views

CVE-2014-8316

CVE-2014-8316 is an XML External Entity (XXE) vulnerability in SAP BusinessObjects Explorer 14.0.5 build 882, affecting polestar_xml.jsp. The issue enables remote attackers to read arbitrary files through the xmlParameter parameter in an explorationSpaceUpdate request, implying potential partial ...

5CVSS6.9AI score0.00797EPSS
Exploits1References8Affected Software1
Rows per page
Query Builder