25 matches found
CVE-2015-8861 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce...
Linux Distros Unpatched Vulnerability : CVE-2015-8861
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The handlebars package before 4.0.0 for Node.js allows remote attackers to conduct cross-site scripting XSS attacks by leveraging a template with an attribute...
MAL-2025-8861 Malicious code in @malware-test-pores-rayle-crass-taths/test-mlw3-pores-rayle-crass-taths (npm)
The package @malware-test-pores-rayle-crass-taths/test-mlw3-pores-rayle-crass-taths was found to contain malicious code...
CVE-2024-8861
creationtimestamp| type| source ---|---|--- 2024-09-26 11:16:59+00:00| seen| https://t.me/cvedetector/6391...
CVE-2024-8861
CVE-2024-8861 affects ProfileGrid – User Profiles, Groups and Communities (WordPress) up to version 5.9.3.2. Root cause: incorrect use of wp_kses_allowed_html enabling the onclick attribute, allowing Stored XSS when an authenticated user with Contributor+ access injects scripts; scripts execute w...
CVE-2019-8861
Rejected reason: This candidate is unused by its CNA...
RHEL 8 : Red Hat OpenStack Platform 16.1.9 (numpy) (RHSA-2022:8861)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:8861 advisory. A fast multidimensional array facility for Python Security Fixes: NULL pointer dereference in numpy.sort in the PyArrayDescrNew due to missing...
CVE-2020-8861
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fi range extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The iss...
CVE-2020-8861
The CVE-2020-8861 issue affects D-Link DAP-1330 1.10B01 BETA Wi‑Fi range extenders. It arises from incorrect handling of HNAP login requests and cookies, enabling network‑adjacent attackers to bypass authentication. The vulnerability has been described as allowing the attacker to execute arbitrar...
CVE-2015-8861
creationtimestamp| type| source ---|---|--- 2018-10-23 17:20:12+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-9prh-257w-9277...
08cms (=1.0.0), 101 (>=0.3.0 <=0.7.1) +4159 more potentially affected by CVE-2015-8861 via handlebars (>=1.0.10 <=3.0.8)
handlebars NPM version =1.0.10, =0.3.0, =0.0.1, =0.0.2, =0.0.16, =0.0.1, =1.2.1, =1.0.0, =1.0.1, =1.0.0, =1.0.0, =2.0.4, =1.0.13, =1.0.0, =1.0.1 and more Source cves: CVE-2015-8861 Source advisory: OSV:GHSA-9PRH-257W-9277...
CVE-2018-8861
Philips Brilliance CT kiosk devices (Brilliance 64 v2.6.2 and earlier; Brilliance iCT v4.1.6 and earlier; Brilliance iCT SP v3.2.4 and earlier; Brilliance CT Big Bore v2.3.5 and earlier) have vulnerabilities that could allow a limited‑access kiosk user or an attacker to break out of the kiosk con...
Cohu 3960HD Multiple Vulnerabilities
Cohu 3960HD Series IP cameras are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
CVE-2017-8861
Missing authentication for the remote configuration port 1236/tcp on the Cohu 3960HD allows an attacker to change configuration parameters such as IP address and username/password via specially crafted XML SOAP packets...
CVE-2017-8861
Missing authentication for the remote configuration port 1236/tcp on the Cohu 3960HD allows an attacker to change configuration parameters such as IP address and username/password via specially crafted XML SOAP packets...
CVE-2017-8861
The CVE-2017-8861 issue affects Cohu 3960HD IP cameras and is due to missing authentication on remote configuration port 1236/tcp. Affected functionality allows an attacker to modify critical configuration parameters (e.g., IP address, username/password) by sending specially crafted XML SOAP pack...
CVE-2014-8861
CVE-2014-8861 is rejected/not used; the candidate is not associated with any vulnerability.
Tenable Log Correlation Engine (LCE) < 4.8.1 Multiple Vulnerabilities
The version of Tenable Log Correlation Engine LCE installed on the remote host is prior to 4.8.1. It is, therefore, affected by the following vulnerabilities : - Multiple cross-site scripting XSS vulnerabilities exist in the Handlebars library in the lib/handlebars/utils.js script due to a failur...