Lucene search
K

28 matches found

Circl
Circl
added 2026/01/14 11:13 p.m.4 views

CVE-2015-8748

creationtimestamp| type| source ---|---|--- 2026-01-14 23:13:30+00:00| seen| https://gist.github.com/ilya-startcode/36aae702894882b7b005b436448a38a0...

5.3CVSS5.8AI score0.00566EPSS
Exploits0References1
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-23131 Malicious code in india-fir-8748 (npm)

The package india-fir-8748 was found to contain malicious code...

7.2AI score
Exploits0
Circl
Circl
added 2025/08/08 12:15 p.m.3 views

CVE-2025-8748

creationtimestamp| type| source ---|---|--- 2025-08-08 12:15:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvva547fwr2d...

8.8CVSS4.8AI score0.01752EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 1:25 a.m.3 views

CVE-2014-8748

Cross-site scripting XSS vulnerability in the Google Doubleclick for Publishers DFP module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the "administer dfp" permission to inject arbitrary web script or HTML via a slot name...

3.5CVSS5.4AI score0.00201EPSS
Exploits0References1
Circl
Circl
added 2024/03/15 9:41 a.m.2 views

CVE-2019-8748

creationtimestamp| type| source ---|---|--- 2024-03-15 09:41:20+00:00| seen| https://t.me/ctinow/208548...

7.8CVSS6.1AI score0.00122EPSS
Exploits0References1
NVD
NVD
added 2023/03/22 2:15 p.m.10 views

CVE-2020-8748

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...

6.5AI score
Exploits0
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.15 views

Debian: Security Advisory (DLA-403-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.5AI score0.01809EPSS
Exploits0References2
Openbugbounty
Openbugbounty
added 2020/03/09 2:58 p.m.7 views

hykenykagonyfyx.gq Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1114473 Security Researcher geeknik Helped patch 8748 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting hykenykagonyfyx.gq website...

0.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2020/01/27 5:22 p.m.10 views

leboatingclub.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1076501 Security Researcher geeknik Helped patch 8748 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting leboatingclub.com website...

0.2AI score
Exploits0
CVE
CVE
added 2019/12/18 5:33 p.m.78 views

CVE-2019-8748

CVE-2019-8748 affects macOS Catalina 10.15 where a memory corruption issue in the kernel could let an attacker execute arbitrary code with kernel privileges. Apple’s HT210722/HT210634 entries confirm the vulnerability and its fix in Catalina 10.15.1 (and related security updates); remediation is ...

7.8CVSS8.2AI score0.00122EPSS
Exploits0References2Affected Software1
ThreatPost
ThreatPost
added 2019/10/08 7:34 p.m.99 views

Apple Tackles Over a Dozen Bugs in its Catalina 10.15 Update

Apple wasted little time snuffing out bugs in its macOS Catalina operating system. On Tuesday, Apple rolled out 16 patches addressing a wide range of Catalina bugs in components such as CoreAudio, IOGraphics and WebKit. The security fixes are exclusively for macOS 10.15; so pre-Catalina releases ...

9.3CVSS0.5AI score0.15354EPSS
Exploits4References11
Apple
Apple
added 2019/10/07 12:0 a.m.49 views

About the security content of macOS Catalina 10.15

About the security content of macOS Catalina 10.15 This document describes the security content of macOS Catalina 10.15. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

9.8CVSS0.5AI score0.15354EPSS
Exploits4References1Affected Software1
CVE
CVE
added 2017/10/19 8:0 p.m.64 views

CVE-2016-8748

Affected software and component: Apache NiFi; vulnerable in the connection details dialog. Root cause: user-supplied text is not properly sanitized/handled before being added to the DOM, enabling cross-site scripting. Versions affected: NiFi before 1.0.1 and 1.1.x before 1.1.1. Impact (as stated)...

5.4CVSS5.2AI score0.00406EPSS
Exploits1References2Affected Software1
Prion
Prion
added 2017/09/13 1:29 a.m.22 views

Memory corruption

Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption...

7.6CVSS7.5AI score0.78226EPSS
Exploits12References4
CVE
CVE
added 2017/09/13 1:0 a.m.89 views

CVE-2017-8748

CVE-2017-8748 is a remote code execution vulnerability in Internet Explorer (and IE components in Edge) caused by how the browser’s JavaScript engines render in-memory objects. The issue affects multiple Windows versions listed in the CVE and is described in the September 2017 IE security updates...

7.6CVSS7.2AI score0.21953EPSS
Exploits8References4Affected Software2
Tenable Nessus
Tenable Nessus
added 2016/03/04 12:0 a.m.21 views

Fedora 22 : radicale-1.1.1-1.fc22 (2016-cf9e2429b5)

Version 1.1.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

10CVSS7.2AI score0.01809EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2016/02/11 12:0 a.m.12 views

Mageia: Security Advisory (MGASA-2016-0057)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS7.4AI score0.00566EPSS
Exploits0References5
OSV
OSV
added 2016/02/09 1:5 p.m.3 views

MGASA-2016-0057 Updated radicale packages fix CVE-2015-8748

Updated radicale package fixes security vulnerabilities: If an attacker is able to authenticate with a user name like .', he can bypass read/write limitations imposed by regex-based rules, including the built-in rules ownerwrite' read for everybody, write for the calendar owner and owneronly' rea...

5.3CVSS6.3AI score0.00566EPSS
Exploits0References4
CVE
CVE
added 2016/02/03 3:0 p.m.79 views

CVE-2015-8748

CVE-2015-8748 affects Radicale prior to 1.1. It allows remote authenticated users to bypass read/write restrictions (owner_write/owner_only) by using regex metacharacters in the user name (demonstrated with ".*"). The issue originates from regex-based rights handling and can permit privilege esca...

5.3CVSS6.6AI score0.00566EPSS
Exploits0References8Affected Software1
Tenable Nessus
Tenable Nessus
added 2016/02/01 12:0 a.m.18 views

Debian DSA-3462-1 : radicale - security update

Two vulnerabilities were fixed in radicale, a CardDAV/CalDAV server. - CVE-2015-8747 The not configured by default and not available on Wheezy multifilesystem storage backend allows read and write access to arbitrary files still subject to the DAC permissions of the user the radicale server is...

10CVSS7.4AI score0.01809EPSS
Exploits0References8
Rows per page
Query Builder