Lucene search
K

39 matches found

OSV
OSV
added 4 hours ago2 views

MINI-8349-RM7R-2WVP

Bulletin has no description...

6.5CVSS0.00004EPSS
Exploits0
OSV
OSV
added 2026/05/11 11:16 p.m.1 views

MINI-27MH-8349-6X2R

Bulletin has no description...

5.9CVSS5.7AI score0.00005EPSS
Exploits0
Circl
Circl
added 2025/10/20 12:50 p.m.3 views

CVE-2025-8349

creationtimestamp| type| source ---|---|--- 2025-10-20 12:50:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3mu5rz2qc2q...

5.3CVSS4.8AI score0.00056EPSS
Exploits0References1
vulnersOsv
vulnersOsv
added 2025/10/20 10:42 a.m.3 views

nuxt-tawk-to (>=1.0.0 <=2.0.0) potentially affected by CVE-2025-8349 via @tawk.to/tawk-messenger-vue-3 (=1.0.3)

@tawk.to/tawk-messenger-vue-3 NPM version =1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on @tawk.to/tawk-messenger-vue-3 and may be impacted: - nuxt-tawk-to =1.0.0, =2.0.0 Source cves: CVE-2025-8349 Source advisory:...

5.3CVSS5.8AI score0.00056EPSS
Exploits0
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-49117

Malicious code in bioql PyPI...

7.2CVSS6.3AI score0.03968EPSS
Exploits1References2
OSV
OSV
added 2025/09/15 1:12 a.m.0 views

ECHO-23DC-D8DF-8349

Bulletin has no description...

7AI score
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 5:26 a.m.3 views

CVE-2019-8349

Multiple cross-site scripting XSS vulnerabilities in HTMLy 2.7.4 allow remote attackers to inject arbitrary web script or HTML via the 1 destination parameter to delete feature; the 2 destination parameter to edit feature; 3 content parameter in the profile feature...

6.1CVSS5.9AI score0.00463EPSS
Exploits3References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2017-8349

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.5-5, the ReadSFWImage function in sfw.c allows attackers to cause a denial of service memory leak via a crafted file. CVE-2017-8349 Note that...

6.5CVSS6.7AI score0.00349EPSS
Exploits0References2
Circl
Circl
added 2024/09/25 5:57 a.m.0 views

CVE-2024-8349

creationtimestamp| type| source ---|---|--- 2024-09-25 05:57:29+00:00| seen| https://t.me/cvedetector/6279...

7.2CVSS4.8AI score0.03968EPSS
Exploits0References1
CVE
CVE
added 2024/09/25 2:32 a.m.74 views

CVE-2024-8350

The CVE entries CVE-2024-8350 and CVE-2024-8349 relate to the Uncanny Groups for LearnDash plugin for WordPress. All versions up to 6.1.0.1 are affected by a missing capability check on the /wp-json/ulgm_management/v1/add_user/ REST API endpoint, allowing authenticated attackers with group leader...

2.7CVSS5.1AI score0.0024EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/25 2:32 a.m.16 views

CVE-2024-8349 Uncanny Groups for LearnDash <= 6.1.0.1 - Authenticated (Group Leader+) Privilege Escalation

The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 6.1.0.1. This is due to the plugin not properly restricting what users a group leader can edit. This makes it possible for authenticated attackers, with group...

7.2CVSS7AI score0.03968EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/09/25 2:32 a.m.19 views

CVE-2024-8349 Uncanny Groups for LearnDash <= 6.1.0.1 - Authenticated (Group Leader+) Privilege Escalation

The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 6.1.0.1. This is due to the plugin not properly restricting what users a group leader can edit. This makes it possible for authenticated attackers, with group...

7.2CVSS0.03968EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.31 views

SUSE: Security Advisory (SUSE-SU-2017:1599-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.7AI score0.02719EPSS
Exploits2References26
CVE
CVE
added 2020/10/14 9:25 p.m.51 views

CVE-2020-8349

CVE-2020-8349 affects Cloud Networking Operating System (CNOS) via the optional REST API management interface. The vulnerability is unauthenticated remote code execution that is not present when the REST API interface is disabled; if enabled, access is limited to the VRF and governed by ACLs. Imp...

9.8CVSS9.7AI score0.02622EPSS
Exploits0References1Affected Software1
Lenovo
Lenovo
added 2020/10/07 3:1 a.m.17 views

Cloud Networking Operating System (CNOS) Vulnerability - Lenovo Support US

No description provided...

9.8CVSS9.5AI score0.02622EPSS
Exploits0
Lenovo
Lenovo
added 2020/10/07 3:1 a.m.21 views

Cloud Networking Operating System (CNOS) Vulnerability - Lenovo Support US

Lenovo Security Advisory: LEN-44423 Potential Impact: Remote code execution Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2020-8349 Summary Description: An internal security review has identified an unauthenticated remote code execution vulnerability in CNOS’ optional REST A...

1.5AI score0.02622EPSS
Exploits0
OSV
OSV
added 2019/05/08 2:29 p.m.15 views

CVE-2019-8349

Multiple cross-site scripting XSS vulnerabilities in HTMLy 2.7.4 allow remote attackers to inject arbitrary web script or HTML via the 1 destination parameter to delete feature; the 2 destination parameter to edit feature; 3 content parameter in the profile feature...

6.1CVSS6AI score
Exploits0References3
CVE
CVE
added 2019/05/08 1:24 p.m.41 views

CVE-2019-8349

Multiple XSS vulnerabilities in HTMLy 2.7.4 allow remote attackers to inject arbitrary scripts via (1) destination parameter to delete and (2) destination parameter to edit, and via the content parameter in the profile feature. Affected product: HTMLy 2.7.4. Root cause: input handling in the dele...

6.1CVSS6AI score0.00463EPSS
Exploits3References3Affected Software1
Packet Storm
Packet Storm
added 2019/02/18 12:0 a.m.92 views

HTMLy 2.7.4 Cross Site Scripting

Multiple Cross-Site Scripting Vulnerabilities in HTMLy 2.7.4 Information -------------------- Advisory by Netsparker Name: Cross-Site Scripting Vulnerabilities in HTMLy 2.7.4 Affected Software: HTMLy Affected Versions: 2.7.4 Homepage: https://github.com/danpros/htmly Vulnerability: Cross-Site...

6.4AI score0.00463EPSS
Exploits3
0day.today
0day.today
added 2019/02/18 12:0 a.m.30 views

HTMLy 2.7.4 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Multiple Cross-Site Scripting Vulnerabilities in HTMLy 2.7.4 Information -------------------- Advisory by Netsparker Name: Cross-Site Scripting Vulnerabilities in HTMLy 2.7.4 Affected Software: HTMLy Affected Versions: 2.7.4 Homepage:...

6.4AI score0.00463EPSS
Exploits3
Rows per page
Query Builder