45 matches found
MINI-F62V-JC4H-8737
Bulletin has no description...
CVE-2026-8737
creationtimestamp| type| source ---|---|--- 2026-05-17 07:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlztpq24sr2y 2026-05-17 07:32:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116588742163874116...
CVE-2026-8737
Sanluan PublicCMS 5.202506.d contains a vulnerability in the Trade Address Query Handler component. The issue is in publiccms-trade/src/main/java/com/publiccms/views/directive/trade/TradeAddressListDirective.java, where manipulating the arguments userId/id can bypass authentication. The flaw allo...
MINI-X8PF-8737-8G4W
Bulletin has no description...
CVE-2020-8737
Improper buffer restrictions in the IntelR StratixR 10 FPGA firmware provided with the IntelR QuartusR Prime Pro software before version 20.1 may allow an unauthenticated user to potentially enable escalation of privilege and/or information disclosure via physical access...
Linux Distros Unpatched Vulnerability : CVE-2014-8737
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. dot dot or full path name in ...
CVE-2024-8737
creationtimestamp| type| source ---|---|--- 2024-09-13 17:57:43+00:00| seen| https://t.me/cvedetector/5602...
CVE-2024-8737
The PDF Thumbnail Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...
CVE-2024-8737 PDF Thumbnail Generator <= 1.3 - Reflected Cross-Site Scripting
The PDF Thumbnail Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...
WordPress PDF Thumbnail Generator Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)
Software PDF Thumbnail Generator Type Plugin Vulnerable versions = 1.3 Fixed in 1.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8737 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8724205bb063 Credits vgo0 Required...
CVE-2019-8737
creationtimestamp| type| source ---|---|--- 2024-01-31 14:12:45+00:00| seen| Telegram/bSsd4eX-kuGncKWQLiZpJb3khhPeU4zj2wWivhbZ9FdInf45...
SUSE CVE-2014-8737
Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. dot dot or full path name in an archive to 1 strip or 2 objcopy or create arbitrary files via 3 a .. dot dot or full path name in an archive to ar...
SUSE: Security Advisory (SUSE-SU-2015:0152-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-8737
Improper buffer restrictions in the IntelR StratixR 10 FPGA firmware provided with the IntelR QuartusR Prime Pro software before version 20.1 may allow an unauthenticated user to potentially enable escalation of privilege and/or information disclosure via physical access...
CVE-2020-8737
The CVE-2020-8737 issue affects Intel Stratix 10 FPGA firmware shipped with Intel Quartus Prime Pro before version 20.1. The root cause is improper buffer restrictions, allowing an unauthenticated attacker with physical access to potentially escalate privileges and/or cause information disclosure...
CVE-2019-8737
CVE-2019-8737 is a denial-of-service issue addressed in macOS Catalina 10.15.1 (Security Update 2019-001/2019-006). The description: an attacker in a privileged position may cause a DoS via improved validation; fixed in Catalina 10.15.1. Affected products include macOS Catalina 10.15 and related ...
Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2019-1431)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-8737
Bookme Control Panel 2.0 Application is vulnerable to stored XSS in the Customers “Book Me” function. The vulnerability stems from unsanitized input in the Name and Note fields (custName and custNote) being rendered as JavaScript in the user’s browser. The CVE/NVD entries confirm the affected pro...
CVE-2016-8737
In Apache Brooklyn, before version 0.10.0, the REST server is vulnerable to CSRF, allowing a malicious site to cause the user’s Brooklyn server to execute attacker commands via a forged request. A PoC exists per the CVE description. Several connected advisories document affected components and pr...
CVE-2017-8737
Microsoft Windows PDF Library in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Windows PDF Library handles object...