Lucene search
+L

52 matches found

osv_mini
osv_mini
•added 2026/08/09 1:22 p.m.•13 views

MINI-2RJF-8PC6-8737

Bulletin has no description...

6.1CVSS5.7AI score0.00404EPSS
SaveExploits1
osv_mini
osv_mini
•added 2026/06/04 9:35 a.m.•16 views

MINI-F62V-JC4H-8737

Bulletin has no description...

5.3CVSS6.4AI score0.00469EPSS
SaveExploits0
Circl
Circl
•added 2026/05/17 7:30 a.m.•34 views

CVE-2026-8737

creationtimestamp| type| source ---|---|--- 2026-05-17 07:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mlztpq24sr2y 2026-05-17 07:32:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116588742163874116...

6.9CVSS6AI score0.00403EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/17 6:45 a.m.•50 views

CVE-2026-8737

Sanluan PublicCMS 5.202506.d contains a vulnerability in the Trade Address Query Handler component. The issue is in publiccms-trade/src/main/java/com/publiccms/views/directive/trade/TradeAddressListDirective.java, where manipulating the arguments userId/id can bypass authentication. The flaw allo...

6.9CVSS5.6AI score0.00403EPSS
SaveExploits0References4
osv_mini
osv_mini
•added 2026/05/12 3:49 a.m.•22 views

MINI-X8PF-8737-8G4W

Bulletin has no description...

7.5CVSS7.5AI score0.00633EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/02/18 10:41 p.m.•2 views

ai-enterprise-agent (>=0.0.4, <=0.0.9), almax-common (>=1.0.5.dev20240601224039, <=1.0.7.dev20240801212517) +25 more potentially affected by CVE-2026-27026 via pypdf (4.2.0)

pypdf PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - ai-enterprise-agent =0.0.4, =1.0.5.dev20240601224039, =2024.7.4, =0.6.22, =0.2.1, =0.2.0, =0.0.5, =0.2.1, =3.3.2, =0.1.0, =0.0.1, =4.7.1, =0.1.0, =0.1...

6.9CVSS6AI score0.00191EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/22 4:52 p.m.•20 views

CVE-2020-8737

Improper buffer restrictions in the IntelR StratixR 10 FPGA firmware provided with the IntelR QuartusR Prime Pro software before version 20.1 may allow an unauthenticated user to potentially enable escalation of privilege and/or information disclosure via physical access...

6.8CVSS7.2AI score0.00367EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2014-8737

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. dot dot or full path name in ...

3.6CVSS7.3AI score0.0104EPSS
SaveExploits1References2
Circl
Circl
•added 2024/09/13 5:57 p.m.•18 views

CVE-2024-8737

creationtimestamp| type| source ---|---|--- 2024-09-13 17:57:43+00:00| seen| https://t.me/cvedetector/5602...

6.1CVSS5.7AI score0.00403EPSS
SaveExploits0References1
NVD
NVD
•added 2024/09/13 3:15 p.m.•39 views

CVE-2024-8737

The PDF Thumbnail Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

6.1CVSS0.00403EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/09/13 3:10 p.m.•48 views

CVE-2024-8737 PDF Thumbnail Generator <= 1.3 - Reflected Cross-Site Scripting

The PDF Thumbnail Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 1.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

6.1CVSS0.00403EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2024/09/13 12:00 a.m.•23 views

WordPress PDF Thumbnail Generator Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Software PDF Thumbnail Generator Type Plugin Vulnerable versions = 1.3 Fixed in 1.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8737 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 8724205bb063 Credits vgo0 Required...

6.1CVSS5.8AI score0.00403EPSS
SaveExploits0References3Affected Software1
Circl
Circl
•added 2024/01/31 2:12 p.m.•17 views

CVE-2019-8737

creationtimestamp| type| source ---|---|--- 2024-01-31 14:12:45+00:00| seen| Telegram/bSsd4eX-kuGncKWQLiZpJb3khhPeU4zj2wWivhbZ9FdInf45...

6.5CVSS4.8AI score0.00867EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2023/02/15 5:25 a.m.•14 views

SUSE CVE-2014-8737

Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. dot dot or full path name in an archive to 1 strip or 2 objcopy or create arbitrary files via 3 a .. dot dot or full path name in an archive to ar...

3.6CVSS6.8AI score0.0104EPSS
SaveExploits1References7
vulnersOsv
vulnersOsv
•added 2022/05/17 12:50 a.m.•5 views

io.brooklyn.clocker:brooklyn-clocker-dist (>=1.1.0, <=1.1.1), io.brooklyn.clocker:brooklyn-clocker-jsgui (>=1.1.0, <=1.1.1) +1 more potentially affected by CVE-2016-8737 via org.apache.brooklyn:brooklyn-jsgui (>=0.7.0-incubating, <=0.9.0)

org.apache.brooklyn:brooklyn-jsgui MAVEN version =0.7.0-incubating, =1.1.0, =1.1.0, =0.7.0-incubating, =0.9.0 Source cves: CVE-2016-8737 Source advisory: OSV:GHSA-G2HF-G7FH-VG92...

8.8CVSS0.01318EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2022/05/17 12:50 a.m.•3 views

com.a9ski.brooklyn:apache-brooklyn-ldap-provider (1.0.0), eu.seaclouds-project:seaclouds-qa (1.0.0) +19 more potentially affected by CVE-2016-8737 via org.apache.brooklyn:brooklyn-rest-resources (0.9.0)

org.apache.brooklyn:brooklyn-rest-resources MAVEN version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.brooklyn:brooklyn-rest-resources and may be impacted: - com.a9ski.brooklyn:apache-brooklyn-ldap-provider 1.0.0 -...

8.8CVSS0.01318EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/11/23 12:00 a.m.•5 views

PT-2021-8737

Name of the Vulnerable Software and Affected Versions No information is available about the vulnerable software and its affected versions. Description The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected candidate numbe...

SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•34 views

SUSE: Security Advisory (SUSE-SU-2015:0152-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.9AI score0.07486EPSS
SaveExploits7References2
osv_cve
osv_cve
•added 2020/11/12 6:15 p.m.•15 views

CVE-2020-8737

Improper buffer restrictions in the IntelR StratixR 10 FPGA firmware provided with the IntelR QuartusR Prime Pro software before version 20.1 may allow an unauthenticated user to potentially enable escalation of privilege and/or information disclosure via physical access...

6.8CVSS6.9AI score0.00367EPSS
SaveExploits0References1
CVE
CVE
•added 2020/11/12 6:02 p.m.•66 views

CVE-2020-8737

The CVE-2020-8737 issue affects Intel Stratix 10 FPGA firmware shipped with Intel Quartus Prime Pro before version 20.1. The root cause is improper buffer restrictions, allowing an unauthenticated attacker with physical access to potentially escalate privileges and/or cause information disclosure...

6.8CVSS6.8AI score0.00367EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder