33 matches found
MINI-PG4Q-M3G3-8498
Bulletin has no description...
MINI-8HQ7-8498-HQXV
Bulletin has no description...
EUVD-2018-20142
Malware in sbrugna...
MAL-2025-8498 Malicious code in @malware-test-biked-laths-gucky-agave/test-mlw3-biked-laths-gucky-agave (npm)
The package @malware-test-biked-laths-gucky-agave/test-mlw3-biked-laths-gucky-agave was found to contain malicious code...
CVE-2025-8498
A security vulnerability has been detected in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of the file /cart/index.php. Such manipulation of the argument uname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly...
CVE-2025-8498 code-projects Online Medicine Guide index.php sql injection
A security vulnerability has been detected in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of the file /cart/index.php. Such manipulation of the argument uname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly...
CVE-2025-8498
CVE-2025-8498 affects code-projects Online Medicine Guide 1.0. A SQL injection vulnerability arises from manipulation of the uname argument in /cart/index.php, enabling remote exploitation. Public disclosure exists and multiple sources (NVD, Red Hat, CVE listings, PT Security) describe the issue ...
CVE-2025-8498 code-projects Online Medicine Guide index.php sql injection
A security vulnerability has been detected in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of the file /cart/index.php. Such manipulation of the argument uname leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly...
CVE-2020-8498
XSS exists in the shortcode functionality of the GistPress plugin before 3.0.2 for WordPress via the includes/class-gistpress.php id parameter. This allows an attacker with the WordPress Contributor role to execute arbitrary JavaScript code with the privileges of other users e.g., ones who have t...
CVE-2020-8498
XSS exists in the shortcode functionality of the GistPress plugin before 3.0.2 for WordPress via the includes/class-gistpress.php id parameter. This allows an attacker with the WordPress Contributor role to execute arbitrary JavaScript code with the privileges of other users e.g., ones who have t...
CVE-2020-8498
Summary (CVE-2020-8498): A cross-site scripting vulnerability exists in the WordPress GistPress plugin prior to 3.0.2. The flaw is in the shortcode handling (includes/class-gistpress.php, id parameter) that allows an attacker with the WordPress Contributor role to inject and execute JavaScript in...
CVE-2018-8498
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique fr...
Privilege escalation
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique fr...
CVE-2018-8498
CVE-2018-8498 affects Microsoft SharePoint Server and is described as an elevation of privilege vulnerability caused by improper sanitization of a specially crafted web request. The CVSS v3 base score is 5.4 (MEDIUM) with network attack vector, low attack complexity, and user interaction required...
Description of the security update for SharePoint Enterprise Server 2013: October 9, 2018
None None...
Microsoft SharePoint Server CVE-2018-8498 Remote Privilege Escalation Vulnerability
Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsof...
Security Updates for Microsoft SharePoint Server (October 2018)
The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected View. An...
CVE-2016-8498
CVE-2016-8498 entry is rejected and not an active vulnerability.
CVE-2017-8498
Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read data not intended to be disclosed when Edge allows JavaScript XML DOM objects to detect installed browser extensions, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique fro...