Lucene search
K

45 matches found

OSV
OSV
added 2026/06/04 9:35 a.m.3 views

MINI-F62V-JC4H-8737

Bulletin has no description...

5.3CVSS5.7AI score0.00507EPSS
Exploits0
Circl
Circl
added 2026/05/17 7:30 a.m.10 views

CVE-2026-8737

creationtimestamp| type| source ---|---|--- 2026-05-17 07:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlztpq24sr2y 2026-05-17 07:32:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116588742163874116...

6.9CVSS6AI score0.00403EPSS
Exploits0References2
CVE
CVE
added 2026/05/17 6:45 a.m.17 views

CVE-2026-8737

Sanluan PublicCMS 5.202506.d contains a vulnerability in the Trade Address Query Handler component. The issue is in publiccms-trade/src/main/java/com/publiccms/views/directive/trade/TradeAddressListDirective.java, where manipulating the arguments userId/id can bypass authentication. The flaw allo...

6.9CVSS5.6AI score0.00403EPSS
Exploits0References4
OSV
OSV
added 2026/05/12 3:49 a.m.4 views

MINI-X8PF-8737-8G4W

Bulletin has no description...

7.5CVSS5.7AI score0.00588EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 4:52 p.m.6 views

CVE-2020-8737

Improper buffer restrictions in the IntelR StratixR 10 FPGA firmware provided with the IntelR QuartusR Prime Pro software before version 20.1 may allow an unauthenticated user to potentially enable escalation of privilege and/or information disclosure via physical access...

6.8CVSS7.2AI score0.00362EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2014-8737

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. dot dot or full path name in ...

3.6CVSS7.5AI score0.0104EPSS
Exploits1References2
Circl
Circl
added 2024/09/13 5:57 p.m.3 views

CVE-2024-8737

creationtimestamp| type| source ---|---|--- 2024-09-13 17:57:43+00:00| seen| https://t.me/cvedetector/5602...

6.1CVSS4.8AI score0.00381EPSS
Exploits0References1
NVD
NVD
added 2024/09/13 3:15 p.m.24 views

CVE-2024-8737

The PDF Thumbnail Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

6.1CVSS0.00381EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/09/13 3:10 p.m.27 views

CVE-2024-8737 PDF Thumbnail Generator <= 1.3 - Reflected Cross-Site Scripting

The PDF Thumbnail Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

6.1CVSS0.00381EPSS
Exploits0References3
Patchstack
Patchstack
added 2024/09/13 12:0 a.m.8 views

WordPress PDF Thumbnail Generator Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Software PDF Thumbnail Generator Type Plugin Vulnerable versions = 1.3 Fixed in 1.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8737 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8724205bb063 Credits vgo0 Required...

6.1CVSS5.7AI score0.00381EPSS
Exploits0References3Affected Software1
Circl
Circl
added 2024/01/31 2:12 p.m.2 views

CVE-2019-8737

creationtimestamp| type| source ---|---|--- 2024-01-31 14:12:45+00:00| seen| Telegram/bSsd4eX-kuGncKWQLiZpJb3khhPeU4zj2wWivhbZ9FdInf45...

6.5CVSS4.8AI score0.00856EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2023/02/15 5:25 a.m.3 views

SUSE CVE-2014-8737

Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. dot dot or full path name in an archive to 1 strip or 2 objcopy or create arbitrary files via 3 a .. dot dot or full path name in an archive to ar...

3.6CVSS6.8AI score0.0104EPSS
Exploits1References7
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2015:0152-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.9AI score0.07486EPSS
Exploits7References2
OSV
OSV
added 2020/11/12 6:15 p.m.1 views

CVE-2020-8737

Improper buffer restrictions in the IntelR StratixR 10 FPGA firmware provided with the IntelR QuartusR Prime Pro software before version 20.1 may allow an unauthenticated user to potentially enable escalation of privilege and/or information disclosure via physical access...

6.8CVSS6.9AI score
Exploits0References1
CVE
CVE
added 2020/11/12 6:2 p.m.35 views

CVE-2020-8737

The CVE-2020-8737 issue affects Intel Stratix 10 FPGA firmware shipped with Intel Quartus Prime Pro before version 20.1. The root cause is improper buffer restrictions, allowing an unauthenticated attacker with physical access to potentially escalate privileges and/or cause information disclosure...

6.8CVSS6.8AI score0.00362EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2020/10/27 7:43 p.m.67 views

CVE-2019-8737

CVE-2019-8737 is a denial-of-service issue addressed in macOS Catalina 10.15.1 (Security Update 2019-001/2019-006). The description: an attacker in a privileged position may cause a DoS via improved validation; fixed in Catalina 10.15.1. Affected products include macOS Catalina 10.15 and related ...

6.5CVSS6.4AI score0.00856EPSS
Exploits0References2Affected Software1
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.48 views

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2019-1431)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.07486EPSS
Exploits15References2
CVE
CVE
added 2018/03/17 1:0 p.m.36 views

CVE-2018-8737

Bookme Control Panel 2.0 Application is vulnerable to stored XSS in the Customers “Book Me” function. The vulnerability stems from unsanitized input in the Name and Note fields (custName and custNote) being rendered as JavaScript in the user’s browser. The CVE/NVD entries confirm the affected pro...

5.4CVSS5.3AI score0.00545EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2017/09/13 4:0 p.m.45 views

CVE-2016-8737

In Apache Brooklyn, before version 0.10.0, the REST server is vulnerable to CSRF, allowing a malicious site to cause the user’s Brooklyn server to execute attacker commands via a forged request. A PoC exists per the CVE description. Several connected advisories document affected components and pr...

8.8CVSS8.8AI score0.01318EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2017/09/13 1:29 a.m.20 views

CVE-2017-8737

Microsoft Windows PDF Library in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Windows PDF Library handles object...

7.6CVSS7.3AI score0.21531EPSS
Exploits0References3
Rows per page
Query Builder