Lucene search
+L

33 matches found

osv_mini
osv_mini
•added 2026/03/04 5:31 a.m.•1 views

MINI-PG4Q-M3G3-8498

Bulletin has no description...

7.4CVSS7.4AI score0.01042EPSS
SaveExploits0
osv_mini
osv_mini
•added 2026/02/20 2:40 a.m.•3 views

MINI-8HQ7-8498-HQXV

Bulletin has no description...

6.3CVSS6.2AI score0.00498EPSS
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2018-20142

Malware in sbrugna...

5.4CVSS6.6AI score0.02813EPSS
SaveExploits0References5
osv_mal
osv_mal
•added 2025/08/14 6:52 p.m.•2 views

MAL-2025-8498 Malicious code in @malware-test-biked-laths-gucky-agave/test-mlw3-biked-laths-gucky-agave (npm)

The package @malware-test-biked-laths-gucky-agave/test-mlw3-biked-laths-gucky-agave was found to contain malicious code...

7.2AI score
SaveExploits0
osv_cve
osv_cve
•added 2025/08/03 4:15 a.m.•21 views

CVE-2025-8498

A security vulnerability has been detected in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of the file /cart/index.php. Such manipulation of the argument uname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly...

9.8CVSS5.8AI score0.00492EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/08/03 4:02 a.m.•10 views

CVE-2025-8498 code-projects Online Medicine Guide index.php sql injection

A security vulnerability has been detected in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of the file /cart/index.php. Such manipulation of the argument uname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly...

7.5CVSS7.3AI score0.00492EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/08/03 4:02 a.m.•34 views

CVE-2025-8498 code-projects Online Medicine Guide index.php sql injection

A security vulnerability has been detected in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of the file /cart/index.php. Such manipulation of the argument uname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly...

7.5CVSS0.00492EPSS
SaveExploits1References5
CVE
CVE
•added 2025/08/03 4:02 a.m.•53 views

CVE-2025-8498

CVE-2025-8498 affects code-projects Online Medicine Guide 1.0. A SQL injection vulnerability arises from manipulation of the uname argument in /cart/index.php, enabling remote exploitation. Public disclosure exists and multiple sources (NVD, Red Hat, CVE listings, PT Security) describe the issue ...

9.8CVSS7AI score0.00492EPSS
SaveExploits1References5Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/22 4:51 p.m.•17 views

CVE-2020-8498

XSS exists in the shortcode functionality of the GistPress plugin before 3.0.2 for WordPress via the includes/class-gistpress.php id parameter. This allows an attacker with the WordPress Contributor role to execute arbitrary JavaScript code with the privileges of other users e.g., ones who have t...

5.4CVSS6.7AI score0.01211EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/01/30 11:15 p.m.•34 views

CVE-2020-8498

XSS exists in the shortcode functionality of the GistPress plugin before 3.0.2 for WordPress via the includes/class-gistpress.php id parameter. This allows an attacker with the WordPress Contributor role to execute arbitrary JavaScript code with the privileges of other users e.g., ones who have t...

5.4CVSS6.7AI score
SaveExploits0References3
CVE
CVE
•added 2020/01/30 10:52 p.m.•123 views

CVE-2020-8498

Summary (CVE-2020-8498): A cross-site scripting vulnerability exists in the WordPress GistPress plugin prior to 3.0.2. The flaw is in the shortcode handling (includes/class-gistpress.php, id parameter) that allows an attacker with the WordPress Contributor role to inject and execute JavaScript in...

5.4CVSS5.7AI score0.01211EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2018/10/10 1:29 p.m.•26 views

CVE-2018-8498

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique fr...

5.4CVSS5.7AI score0.02256EPSS
SaveExploits0References3
Prion
Prion
•added 2018/10/10 1:29 p.m.•31 views

Privilege escalation

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique fr...

3.5CVSS5.6AI score0.02813EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2018/10/10 1:00 p.m.•90 views

CVE-2018-8498

CVE-2018-8498 affects Microsoft SharePoint Server and is described as an elevation of privilege vulnerability caused by improper sanitization of a specially crafted web request. The CVSS v3 base score is 5.4 (MEDIUM) with network attack vector, low attack complexity, and user interaction required...

5.4CVSS5.6AI score0.02256EPSS
SaveExploits0References3Affected Software1
Microsoft KB
Microsoft KB
•added 2018/10/09 7:00 a.m.•65 views

Description of the security update for SharePoint Enterprise Server 2013: October 9, 2018

None None...

5.4CVSS6.5AI score0.02813EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2018/10/09 12:00 a.m.•79 views

Security Updates for Microsoft SharePoint Server (October 2018)

The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected View. An...

9.3CVSS7.2AI score0.19707EPSS
SaveExploits0References8
Symantec
Symantec
•added 2018/10/09 12:00 a.m.•293 views

Microsoft SharePoint Server CVE-2018-8498 Remote Privilege Escalation Vulnerability

Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsof...

0.3AI score0.02256EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
•added 2017/06/26 5:00 p.m.•15 views

CVE-2016-8498

...

SaveExploits0
CVE
CVE
•added 2017/06/26 5:00 p.m.•27 views

CVE-2016-8498

CVE-2016-8498 entry is rejected and not an active vulnerability.

6.9AI score
SaveExploits0
NVD
NVD
•added 2017/06/15 1:29 a.m.•36 views

CVE-2017-8498

Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read data not intended to be disclosed when Edge allows JavaScript XML DOM objects to detect installed browser extensions, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique fro...

4.3CVSS4.5AI score0.0518EPSS
SaveExploits0References2
Rows per page
Query Builder