Lucene search
+L

41 matches found

osv-cga
osv-cga
•added 2026/07/03 4:46 p.m.•12 views

CGA-8349-J6V3-QW75

Bulletin has no description...

8.8CVSS5.6AI score0.00424EPSS
SaveExploits1
osv-mini
osv-mini
•added 2026/06/05 10:43 a.m.•18 views

MINI-8349-768J-HQR7

Bulletin has no description...

7.5CVSS6.7AI score0.00668EPSS
SaveExploits1
osv-mini
osv-mini
•added 2026/06/05 10:43 a.m.•16 views

MINI-8349-RM7R-2WVP

Bulletin has no description...

7.5CVSS7.3AI score0.00591EPSS
SaveExploits0
osv-mini
osv-mini
•added 2026/05/11 11:16 p.m.•10 views

MINI-27MH-8349-6X2R

Bulletin has no description...

5.9CVSS6.7AI score0.00162EPSS
SaveExploits0
Circl
Circl
•added 2025/10/20 12:50 p.m.•30 views

CVE-2025-8349

creationtimestamp| type| source ---|---|--- 2025-10-20 12:50:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3mu5rz2qc2q...

5.3CVSS5.8AI score0.00533EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
•added 2025/10/20 10:42 a.m.•14 views

nuxt-tawk-to (>=1.0.0, <=2.0.0) potentially affected by CVE-2025-8349 via @tawk.to/tawk-messenger-vue-3 (1.0.3)

@tawk.to/tawk-messenger-vue-3 NPM version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on @tawk.to/tawk-messenger-vue-3 and may be impacted: - nuxt-tawk-to =1.0.0, =2.0.0 Source cves: CVE-2025-8349 Source advisory:...

5.3CVSS5.8AI score0.00533EPSS
SaveExploits0
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2024-49117

Malicious code in bioql PyPI...

7.2CVSS6.3AI score0.01164EPSS
SaveExploits1References2
osv_echo
osv_echo
•added 2025/09/15 1:12 a.m.•5 views

ECHO-23DC-D8DF-8349 This is strongly related to the problem described in CVE-2016-7543 and the correction is very similar. The patch for CVE-2016-7543 is already applied in the version of bash in Debian.

Bulletin has no description...

5.7AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/22 5:26 a.m.•19 views

CVE-2019-8349

Multiple cross-site scripting XSS vulnerabilities in HTMLy 2.7.4 allow remote attackers to inject arbitrary web script or HTML via the 1 destination parameter to delete feature; the 2 destination parameter to edit feature; 3 content parameter in the profile feature...

6.1CVSS5.9AI score0.02184EPSS
SaveExploits3References1
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2017-8349

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.5-5, the ReadSFWImage function in sfw.c allows attackers to cause a denial of service memory leak via a crafted file. CVE-2017-8349 Note that...

6.5CVSS6.9AI score0.01935EPSS
SaveExploits0References2
Circl
Circl
•added 2024/09/25 5:57 a.m.•37 views

CVE-2024-8349

creationtimestamp| type| source ---|---|--- 2024-09-25 05:57:29+00:00| seen| https://t.me/cvedetector/6279...

7.2CVSS4.8AI score0.01164EPSS
SaveExploits0References1
CVE
CVE
•added 2024/09/25 2:32 a.m.•107 views

CVE-2024-8350

The CVE entries CVE-2024-8350 and CVE-2024-8349 relate to the Uncanny Groups for LearnDash plugin for WordPress. All versions up to 6.1.0.1 are affected by a missing capability check on the /wp-json/ulgm_management/v1/add_user/ REST API endpoint, allowing authenticated attackers with group leader...

2.7CVSS5.1AI score0.00427EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/09/25 2:32 a.m.•24 views

CVE-2024-8349 Uncanny Groups for LearnDash <= 6.1.0.1 - Authenticated (Group Leader+) Privilege Escalation

The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 6.1.0.1. This is due to the plugin not properly restricting what users a group leader can edit. This makes it possible for authenticated attackers, with group...

7.2CVSS7AI score0.01164EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/09/25 2:32 a.m.•39 views

CVE-2024-8349 Uncanny Groups for LearnDash <= 6.1.0.1 - Authenticated (Group Leader+) Privilege Escalation

The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 6.1.0.1. This is due to the plugin not properly restricting what users a group leader can edit. This makes it possible for authenticated attackers, with group...

7.2CVSS0.01164EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•40 views

SUSE: Security Advisory (SUSE-SU-2017:1599-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.7AI score0.04852EPSS
SaveExploits2References26
CVE
CVE
•added 2020/10/14 9:25 p.m.•74 views

CVE-2020-8349

CVE-2020-8349 affects Cloud Networking Operating System (CNOS) via the optional REST API management interface. The vulnerability is unauthenticated remote code execution that is not present when the REST API interface is disabled; if enabled, access is limited to the VRF and governed by ACLs. Imp...

9.8CVSS9.7AI score0.02248EPSS
SaveExploits0References1Affected Software1
Lenovo
Lenovo
•added 2020/10/07 3:01 a.m.•70 views

Cloud Networking Operating System (CNOS) Vulnerability - Lenovo Support US

Lenovo Security Advisory: LEN-44423 Potential Impact: Remote code execution Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2020-8349 Summary Description: An internal security review has identified an unauthenticated remote code execution vulnerability in CNOS’ optional REST A...

1.5AI score0.02248EPSS
SaveExploits0
Lenovo
Lenovo
•added 2020/10/07 3:01 a.m.•29 views

Cloud Networking Operating System (CNOS) Vulnerability - Lenovo Support US

No description provided...

9.8CVSS9.5AI score0.02248EPSS
SaveExploits0
osv_cve
osv_cve
•added 2019/05/08 2:29 p.m.•25 views

CVE-2019-8349

Multiple cross-site scripting XSS vulnerabilities in HTMLy 2.7.4 allow remote attackers to inject arbitrary web script or HTML via the 1 destination parameter to delete feature; the 2 destination parameter to edit feature; 3 content parameter in the profile feature...

6.1CVSS6AI score
SaveExploits0References3
CVE
CVE
•added 2019/05/08 1:24 p.m.•65 views

CVE-2019-8349

Multiple XSS vulnerabilities in HTMLy 2.7.4 allow remote attackers to inject arbitrary scripts via (1) destination parameter to delete and (2) destination parameter to edit, and via the content parameter in the profile feature. Affected product: HTMLy 2.7.4. Root cause: input handling in the dele...

6.1CVSS6AI score0.02184EPSS
SaveExploits3References3Affected Software1
Rows per page
Query Builder