54 matches found
CVE-2026-8874
creationtimestamp| type| source ---|---|--- 2026-06-03 20:55:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnfyntaisj2u...
CVE-2026-8874
Version 3.0.7 of the Securly Chrome Extension downloads JSON files containing crisis alert keywords and filtering rules over unencrypted HTTP via the Fetch API. Other endpoints in the same extension correctly fetch IWF and CIPA data over HTTPS, demonstrating an inconsistent implementation of TLS...
CVE-2026-8874
Version 3.0.7 of the Securly Chrome Extension downloads JSON files containing crisis alert keywords and filtering rules over unencrypted HTTP via the Fetch API. Other endpoints in the same extension correctly fetch IWF and CIPA data over HTTPS, demonstrating an inconsistent implementation of TLS...
CGA-6J85-V365-8874
Bulletin has no description...
MINI-GG2J-M7JM-8874
Bulletin has no description...
CVE-2025-8874
creationtimestamp| type| source ---|---|--- 2025-08-12 08:09:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lw6uavho6p2c...
WordPress Master Addons for Elementor plugin <= 2.0.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via fancyBox vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via fancyBox vulnerability discovered by Webbernaut in WordPress Plugin Master Addons for Elementor versions = 2.0.9.0...
Linux Distros Unpatched Vulnerability : CVE-2015-8874
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack consumption vulnerability in GD in PHP before 5.6.12 allows remote attackers to cause a denial of service via a crafted imagefilltoborder call...
CVE-2020-8874
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists withi...
CVE-2024-8874
creationtimestamp| type| source ---|---|--- 2024-11-13 04:07:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113473672668247042 2024-11-13 04:07:16+00:00| seen| https://t.me/cvedetector/10770...
WordPress AJAX Login and Registration modal popup + inline form Plugin <= 2.24 is vulnerable to Cross Site Scripting (XSS)
Software AJAX Login and Registration modal popup + inline form Type Plugin Vulnerable versions = 2.24 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-8874 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...
CVE-2019-8874
Rejected reason: This candidate is unused by its CNA...
SUSE CVE-2015-8874
Stack consumption vulnerability in GD in PHP before 5.6.12 allows remote attackers to cause a denial of service via a crafted imagefilltoborder call...
RHEL 8 : Red Hat OpenStack Platform 16.1.9 (openstack-barbican) (RHSA-2022:8874)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:8874 advisory. Barbican is a REST API designed for the secure storage, provisioning and management of secrets, including in OpenStack environments. Securit...
Mageia: Security Advisory (MGASA-2016-0203)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-8874
CVE-2020-8874 affects Parallels Desktop 15.1.2-47123. The flaw is in the xHCI component and stems from inadequate validation of user-supplied data, causing an integer overflow before a buffer is allocated. This enables a local attacker who already can run high-privileged code on the guest to esca...
EulerOS 2.0 SP2 : gd (EulerOS-SA-2019-1842)
According to the version of the gd package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Stack consumption vulnerability in GD in PHP before 5.6.12 allows remote attackers to cause a denial of service via a crafted imagefilltoborder...
Out-Of-Bounds Read
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...
Denial Of Service (DoS) Through Memory Corruption
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...
Stack-Based Buffer Overflow
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...