39 matches found
MINI-8349-RM7R-2WVP
Bulletin has no description...
MINI-27MH-8349-6X2R
Bulletin has no description...
CVE-2025-8349
creationtimestamp| type| source ---|---|--- 2025-10-20 12:50:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3mu5rz2qc2q...
nuxt-tawk-to (>=1.0.0 <=2.0.0) potentially affected by CVE-2025-8349 via @tawk.to/tawk-messenger-vue-3 (=1.0.3)
@tawk.to/tawk-messenger-vue-3 NPM version =1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on @tawk.to/tawk-messenger-vue-3 and may be impacted: - nuxt-tawk-to =1.0.0, =2.0.0 Source cves: CVE-2025-8349 Source advisory:...
EUVD-2024-49117
Malicious code in bioql PyPI...
ECHO-23DC-D8DF-8349
Bulletin has no description...
CVE-2019-8349
Multiple cross-site scripting XSS vulnerabilities in HTMLy 2.7.4 allow remote attackers to inject arbitrary web script or HTML via the 1 destination parameter to delete feature; the 2 destination parameter to edit feature; 3 content parameter in the profile feature...
Linux Distros Unpatched Vulnerability : CVE-2017-8349
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ImageMagick 7.0.5-5, the ReadSFWImage function in sfw.c allows attackers to cause a denial of service memory leak via a crafted file. CVE-2017-8349 Note that...
CVE-2024-8349
creationtimestamp| type| source ---|---|--- 2024-09-25 05:57:29+00:00| seen| https://t.me/cvedetector/6279...
CVE-2024-8350
The CVE entries CVE-2024-8350 and CVE-2024-8349 relate to the Uncanny Groups for LearnDash plugin for WordPress. All versions up to 6.1.0.1 are affected by a missing capability check on the /wp-json/ulgm_management/v1/add_user/ REST API endpoint, allowing authenticated attackers with group leader...
CVE-2024-8349 Uncanny Groups for LearnDash <= 6.1.0.1 - Authenticated (Group Leader+) Privilege Escalation
The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 6.1.0.1. This is due to the plugin not properly restricting what users a group leader can edit. This makes it possible for authenticated attackers, with group...
CVE-2024-8349 Uncanny Groups for LearnDash <= 6.1.0.1 - Authenticated (Group Leader+) Privilege Escalation
The Uncanny Groups for LearnDash plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 6.1.0.1. This is due to the plugin not properly restricting what users a group leader can edit. This makes it possible for authenticated attackers, with group...
SUSE: Security Advisory (SUSE-SU-2017:1599-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-8349
CVE-2020-8349 affects Cloud Networking Operating System (CNOS) via the optional REST API management interface. The vulnerability is unauthenticated remote code execution that is not present when the REST API interface is disabled; if enabled, access is limited to the VRF and governed by ACLs. Imp...
Cloud Networking Operating System (CNOS) Vulnerability - Lenovo Support US
No description provided...
Cloud Networking Operating System (CNOS) Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-44423 Potential Impact: Remote code execution Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2020-8349 Summary Description: An internal security review has identified an unauthenticated remote code execution vulnerability in CNOS’ optional REST A...
CVE-2019-8349
Multiple cross-site scripting XSS vulnerabilities in HTMLy 2.7.4 allow remote attackers to inject arbitrary web script or HTML via the 1 destination parameter to delete feature; the 2 destination parameter to edit feature; 3 content parameter in the profile feature...
CVE-2019-8349
Multiple XSS vulnerabilities in HTMLy 2.7.4 allow remote attackers to inject arbitrary scripts via (1) destination parameter to delete and (2) destination parameter to edit, and via the content parameter in the profile feature. Affected product: HTMLy 2.7.4. Root cause: input handling in the dele...
HTMLy 2.7.4 Cross Site Scripting
Multiple Cross-Site Scripting Vulnerabilities in HTMLy 2.7.4 Information -------------------- Advisory by Netsparker Name: Cross-Site Scripting Vulnerabilities in HTMLy 2.7.4 Affected Software: HTMLy Affected Versions: 2.7.4 Homepage: https://github.com/danpros/htmly Vulnerability: Cross-Site...
HTMLy 2.7.4 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications Multiple Cross-Site Scripting Vulnerabilities in HTMLy 2.7.4 Information -------------------- Advisory by Netsparker Name: Cross-Site Scripting Vulnerabilities in HTMLy 2.7.4 Affected Software: HTMLy Affected Versions: 2.7.4 Homepage:...