Lucene search
K

29 matches found

OSV
OSV
added 2 days ago2 views

ECHO-2B52-FCFD-8938

Bulletin has no description...

7.2CVSS6.7AI score0.17333EPSS
Exploits1References2
OSV
OSV
added 2025/12/05 2:46 p.m.1 views

MINI-24P6-957X-8938

Bulletin has no description...

7.5CVSS6.9AI score0.00019EPSS
Exploits2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2017-8938

Malware in sbrugna...

7.8CVSS7.7AI score0.00207EPSS
Exploits0References9
OSV
OSV
added 2025/08/14 6:52 p.m.2 views

MAL-2025-8938 Malicious code in @malware-test-sordo-quips-tokes-flory/test-mlw3-sordo-quips-tokes-flory (npm)

The package @malware-test-sordo-quips-tokes-flory/test-mlw3-sordo-quips-tokes-flory was found to contain malicious code...

7.2AI score
Exploits0
Circl
Circl
added 2025/08/14 7:4 a.m.3 views

CVE-2025-8938

creationtimestamp| type| source ---|---|--- 2025-08-14 07:04:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwdrllcyhd2b...

6.5CVSS7.3AI score0.00124EPSS
Exploits0References1
NVD
NVD
added 2025/08/14 5:15 a.m.1 views

CVE-2025-8938

A vulnerability was found in TOTOLINK N350R 1.2.3-B20130826. This issue affects the function formSysTel of the file /boafrm/formSysTel of the component Telnet Service. The manipulation of the argument TelEnabled leads to backdoor. The attack may be initiated remotely. The exploit has been disclos...

6.5CVSS0.00124EPSS
Exploits0References6
OSV
OSV
added 2025/08/14 5:15 a.m.0 views

CVE-2025-8938

A vulnerability was found in TOTOLINK N350R 1.2.3-B20130826. This issue affects the function formSysTel of the file /boafrm/formSysTel of the component Telnet Service. The manipulation of the argument TelEnabled leads to backdoor. The attack may be initiated remotely. The exploit has been disclos...

5.3CVSS5.4AI score
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/05/22 9:17 a.m.4 views

CVE-2019-8938

VertrigoServ 2.17 allows XSS via the /inc/extensions.php ext parameter...

6.1CVSS5.8AI score0.00285EPSS
Exploits3References1
RedhatCVE
RedhatCVE
added 2025/05/22 2:52 a.m.2 views

CVE-2017-8938

The Radio Javan app 9.3.4 through 9.6.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9CVSS6AI score0.00121EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 10:28 p.m.2 views

CVE-2024-8938

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitrary code execution after a successful Man-In-The-Middle attack followed by sending a crafted Modbus function call to tamper with memory area involved in memory...

9.2CVSS7.5AI score0.0018EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/11/28 12:0 a.m.7 views

Schneider Electric Modicon M340, MC80, and Momentum Unity M1E Improper Restriction of Operations Within the Bounds of a Memory Buffer (CVE-2024-8938)

Arbitrary code execution can potentially be achieved after a successful Man-In-The Middle attack followed by sending a crafted Modbus function call to tamper with memory area involved in memory size computation. This plugin only works with Tenable.ot. Please visit...

9.2CVSS6AI score0.0018EPSS
Exploits0References3
NVD
NVD
added 2024/11/13 5:15 a.m.9 views

CVE-2024-8938

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitrary code execution after a successful Man-In-The-Middle attack followed by sending a crafted Modbus function call to tamper with memory area involved in memory...

9.2CVSS0.0018EPSS
Exploits0References1
Circl
Circl
added 2024/11/13 4:33 a.m.4 views

CVE-2024-8938

creationtimestamp| type| source ---|---|--- 2024-11-13 04:33:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113473774972866045 2024-11-13 07:28:15+00:00| seen| https://t.me/cvedetector/10799 2024-11-21 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-326-...

9.2CVSS4.8AI score0.0018EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/11/13 4:20 a.m.5 views

CVE-2024-8938

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitrary code execution after a successful Man-In-The-Middle attack followed by sending a crafted Modbus function call to tamper with memory area involved in memory...

9.2CVSS7.7AI score0.0018EPSS
Exploits0References1
CVE
CVE
added 2020/12/15 2:55 p.m.41 views

CVE-2020-8938

CVE-2020-8938 affects Asylo up to version 0.6.0, where an arbitrary memory overwrite can occur via a host call to FromkLinuxSockAddr with attacker‑controlled content and size of klinux_addr, allowing memory values to be written from inside the enclave. The issue is documented across multiple sour...

5.3CVSS4.2AI score0.0004EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2020/06/01 8:55 p.m.1 views

CVE-2014-8938

creationtimestamp| type| source ---|---|--- 2020-06-01 20:55:36+00:00| seen| https://t.me/cibsecurity/12477...

7.8CVSS7.5AI score0.00054EPSS
Exploits1References1
CVE
CVE
added 2020/06/01 4:25 p.m.75 views

CVE-2014-8938

Lexiglot (up to 2014-11-20) is affected by an information-disclosure vulnerability where local users can obtain usernames and passwords by listing a process, due to credentials being exposed on the command line. Root cause: credentials present on the command line. Impact is a local confidentialit...

7.8CVSS7.4AI score0.00054EPSS
Exploits1References1Affected Software1
Openbugbounty
Openbugbounty
added 2019/09/08 8:56 p.m.7 views

wolfin.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-959120 Security Researcher geeknik Helped patch 8938 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting wolfin.ru website and its...

0.1AI score
Exploits0
0day.today
0day.today
added 2019/02/21 12:0 a.m.32 views

VertrigoServ 2.17 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications alert1 3. Solution: The product is discontinued. Update last version -- 0day.today 2019-03-09...

6.4AI score0.00285EPSS
Exploits3
Packet Storm
Packet Storm
added 2019/02/20 12:0 a.m.23 views

VertrigoServ 2.17 Cross Site Scripting

alert1 3. Solution: The product is discontinued. Update last version --...

6.4AI score0.00285EPSS
Exploits3
Rows per page
Query Builder