28 matches found
CVE-2015-8748
creationtimestamp| type| source ---|---|--- 2026-01-14 23:13:30+00:00| seen| https://gist.github.com/ilya-startcode/36aae702894882b7b005b436448a38a0...
MAL-2025-23131 Malicious code in india-fir-8748 (npm)
The package india-fir-8748 was found to contain malicious code...
CVE-2025-8748
creationtimestamp| type| source ---|---|--- 2025-08-08 12:15:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvva547fwr2d...
CVE-2014-8748
Cross-site scripting XSS vulnerability in the Google Doubleclick for Publishers DFP module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the "administer dfp" permission to inject arbitrary web script or HTML via a slot name...
CVE-2019-8748
creationtimestamp| type| source ---|---|--- 2024-03-15 09:41:20+00:00| seen| https://t.me/ctinow/208548...
CVE-2020-8748
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...
Debian: Security Advisory (DLA-403-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
hykenykagonyfyx.gq Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1114473 Security Researcher geeknik Helped patch 8748 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting hykenykagonyfyx.gq website...
leboatingclub.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1076501 Security Researcher geeknik Helped patch 8748 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting leboatingclub.com website...
CVE-2019-8748
CVE-2019-8748 affects macOS Catalina 10.15 where a memory corruption issue in the kernel could let an attacker execute arbitrary code with kernel privileges. Apple’s HT210722/HT210634 entries confirm the vulnerability and its fix in Catalina 10.15.1 (and related security updates); remediation is ...
Apple Tackles Over a Dozen Bugs in its Catalina 10.15 Update
Apple wasted little time snuffing out bugs in its macOS Catalina operating system. On Tuesday, Apple rolled out 16 patches addressing a wide range of Catalina bugs in components such as CoreAudio, IOGraphics and WebKit. The security fixes are exclusively for macOS 10.15; so pre-Catalina releases ...
About the security content of macOS Catalina 10.15
About the security content of macOS Catalina 10.15 This document describes the security content of macOS Catalina 10.15. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
CVE-2016-8748
Affected software and component: Apache NiFi; vulnerable in the connection details dialog. Root cause: user-supplied text is not properly sanitized/handled before being added to the DOM, enabling cross-site scripting. Versions affected: NiFi before 1.0.1 and 1.1.x before 1.1.1. Impact (as stated)...
Memory corruption
Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption...
CVE-2017-8748
CVE-2017-8748 is a remote code execution vulnerability in Internet Explorer (and IE components in Edge) caused by how the browser’s JavaScript engines render in-memory objects. The issue affects multiple Windows versions listed in the CVE and is described in the September 2017 IE security updates...
Fedora 22 : radicale-1.1.1-1.fc22 (2016-cf9e2429b5)
Version 1.1.1 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...
Mageia: Security Advisory (MGASA-2016-0057)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2016-0057 Updated radicale packages fix CVE-2015-8748
Updated radicale package fixes security vulnerabilities: If an attacker is able to authenticate with a user name like .', he can bypass read/write limitations imposed by regex-based rules, including the built-in rules ownerwrite' read for everybody, write for the calendar owner and owneronly' rea...
CVE-2015-8748
CVE-2015-8748 affects Radicale prior to 1.1. It allows remote authenticated users to bypass read/write restrictions (owner_write/owner_only) by using regex metacharacters in the user name (demonstrated with ".*"). The issue originates from regex-based rights handling and can permit privilege esca...
Debian DSA-3462-1 : radicale - security update
Two vulnerabilities were fixed in radicale, a CardDAV/CalDAV server. - CVE-2015-8747 The not configured by default and not available on Wheezy multifilesystem storage backend allows read and write access to arbitrary files still subject to the DAC permissions of the user the radicale server is...