82 matches found
CVE-2017-8855
wolfSSL before 3.11.0 does not prevent wcDhAgree from accepting a malformed DH key...
CVE-2020-8855
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.2947. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2024-8855
creationtimestamp| type| source ---|---|--- 2025-01-07 06:16:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yrv3hio25 2025-01-07 06:36:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/358 2025-01-07 06:58:11+00:00| seen|...
CVE-2024-8855
The WordPress Auction Plugin WordPress plugin through 3.7 does not sanitize and escape a parameter before using it in a SQL statement, allowing editors and above to perform SQL injection attacks...
CVE-2024-8855
The WordPress Auction Plugin WordPress plugin through 3.7 does not sanitize and escape a parameter before using it in a SQL statement, allowing editors and above to perform SQL injection attacks...
CVE-2024-8855 WordPress Auction <= 3.7 - Editor+ SQL Injection
The WordPress Auction Plugin WordPress plugin through 3.7 does not sanitize and escape a parameter before using it in a SQL statement, allowing editors and above to perform SQL injection attacks...
CVE-2024-8855
CVE-2024-8855 affects the WordPress Auction Plugin (
Ubuntu 16.04 ESM : semver vulnerability (USN-4776-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4776-1 advisory. It was discovered that semver incorrectly handled certain inputs. A remote attacker could possibly use this issue to cause a denial of service. Tenable has...
Authentication Bypass by CSRF Weakness
Impact CSRF vulnerability that allows user account takeover. All applications using any version of the frontend component of solidusauthdevise are affected if protectfromforgery method is both: - Executed whether as: - A beforeaction callback the default - A prependbeforeaction option prepend: tr...
CVE-2019-8855
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Catalina 10.15. A malicious application may be able to access restricted files...
CVE-2019-8855
CVE-2019-8855 is an access issue in macOS that was addressed by adding sandbox restrictions. The vulnerability could have allowed a malicious application to access restricted files. The fixed version is macOS Catalina 10.15. The NVD entry notes a sandbox-related mitigation and identifies the impa...
CVE-2019-8855
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Catalina 10.15. A malicious application may be able to access restricted files...
CVE-2020-8855
Foxit PhantomPDF 9.7.0.2947 (and earlier versions) is affected by a use-after-free in fxhtml2pdf.exe that hinges on failing to validate the existence of an object before operations, enabling remote code execution when a user visits a crafted page or opens a malicious file. The issue allows code e...
CVE-2018-8855
Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices allow unencrypted Web connections by default, and devices can receive configuration and firmware updates by unsecure FTP...
CVE-2018-8855
Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices allow unencrypted Web connections by default, and devices can receive configuration and firmware updates by unsecure FTP...
CVE-2018-8855
Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices allow unencrypted Web connections by default, and devices can receive configuration and firmware updates by unsecure FTP...
CVE-2018-8855
The CVE-2018-8855 entry involves Echelon SmartServer 1 (all versions), SmartServer 2 (all versions before 4.11.007), i.LON 100 (all versions), and i.LON 600 (all versions). The vulnerability stems from cleartext transmission: devices allow unencrypted Web connections by default and can receive co...
CVE-2017-8855
CVE-2017-8855 affects wolfSSL before 3.11.0. The issue is that wc_DhAgree may accept a malformed DH key, exposing integrity (and potentially confidentiality) to compromise; CVSS vectors in public data show overall high impact. Remediation is to upgrade to wolfSSL 3.11.0 or later (e.g., 3.11.0-sta...
CVE-2016-8855
CVE-2016-8855 affects Sitecore Experience Platform 8.1 Update-3 (8.1 rev. 160519). A Cross-Site Scripting (XSS) vulnerability exists in the /sitecore/client/Applications/List Manager/Taskpages/Contact list path, exploitable via the Name or Description parameter to trigger remote attacks. The issu...