Lucene search
K

40 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/27 12:0 a.m.10 views

openSUSE 16 Security Update : MozillaFirefox (openSUSE-SU-2026:20789-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20789-1 advisory. This update for MozillaFirefox fixes the following issues - Update to Firefox Extended Support Release 140.11.0 ESR MFSA 2026-48 bsc1265212. MFS...

9.8CVSS6AI score0.00164EPSS
Exploits0References41
AlpineLinux
AlpineLinux
added 2026/05/19 12:29 p.m.6 views

CVE-2026-8950

Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...

9.3CVSS5.8AI score0.00018EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2026/05/19 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-8950

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird...

9.3CVSS5.8AI score0.00018EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-8119

Malware in sbrugna...

7.8CVSS7.6AI score0.00281EPSS
Exploits0References2
OSV
OSV
added 2025/08/14 8:15 a.m.2 views

CVE-2025-8950

A vulnerability was identified in Campcodes Online Recruitment Management System 1.0. This issue affects some unknown processing of the file /Recruitment/index.php?page=viewvacancy. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has...

9.8CVSS5.8AI score0.00075EPSS
Exploits1References5
NVD
NVD
added 2025/08/14 8:15 a.m.2 views

CVE-2025-8950

A vulnerability was identified in Campcodes Online Recruitment Management System 1.0. This issue affects some unknown processing of the file /Recruitment/index.php?page=viewvacancy. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has...

9.8CVSS0.00075EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/05/22 4:53 p.m.4 views

CVE-2020-8950

The AUEPLauncher service in Radeon AMD User Experience Program Launcher through 1.0.0.1 on Windows allows elevation of privilege by placing a crafted file in %PROGRAMDATA%\AMD\PPC\upload and then creating a symbolic link in %PROGRAMDATA%\AMD\PPC\temp that points to an arbitrary folder with an...

7.8CVSS7.1AI score0.03001EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:55 a.m.6 views

CVE-2019-8950

The backdoor account dnsekakf2$$ in /bin/login on DASAN H665 devices with firmware 1.46p1-0028 allows an attacker to login to the admin account via TELNET...

10CVSS7.1AI score0.00892EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/04 10:34 p.m.1 views

CVE-2024-8950

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arne Informatics Piramit Automation allows Blind SQL Injection. This issue affects Piramit Automation: before 27.09.2024...

9.9CVSS5.8AI score0.00066EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/25 12:16 p.m.18 views

CVE-2024-8950 SQLi in Arne Informatics' Piramit Automation

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arne Informatics Piramit Automation allows Blind SQL Injection. This issue affects Piramit Automation: before 27.09.2024...

9.9CVSS5.8AI score0.00066EPSS
Exploits0References2
OSV
OSV
added 2021/03/01 7:34 p.m.23 views

GHSA-2HWX-MJRM-V3G8 Denial of service attack via .well-known lookups

Impact A malicious homeserver could redirect requests to their .well-known file to a large file. This can lead to a denial of service attack where homeservers will consume significantly more resources when requesting the .well-known file of a malicious homeserver. This affects any server which...

5.3CVSS6.4AI score0.00446EPSS
Exploits0References8
NVD
NVD
added 2020/02/12 8:15 p.m.13 views

CVE-2020-8950

The AUEPLauncher service in Radeon AMD User Experience Program Launcher through 1.0.0.1 on Windows allows elevation of privilege by placing a crafted file in %PROGRAMDATA%\AMD\PPC\upload and then creating a symbolic link in %PROGRAMDATA%\AMD\PPC\temp that points to an arbitrary folder with an...

7.8CVSS7.6AI score0.03001EPSS
Exploits1References2
CVE
CVE
added 2020/02/12 8:0 p.m.64 views

CVE-2020-8950

The CVE-2020-8950 entry affects the AUEPLauncher service in Radeon AMD User Experience Program Launcher (versions up to 1.0.0.1) on Windows. The vulnerability allows local privilege escalation by placing a crafted file in %PROGRAMDATA%\AMD\PPC\upload and then creating a symbolic link in %PROGRAMD...

7.8CVSS7.5AI score0.03001EPSS
Exploits1References2Affected Software1
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.39 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2019-1536)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.2AI score0.25699EPSS
Exploits16References2
CVE
CVE
added 2019/02/20 4:0 a.m.44 views

CVE-2019-8950

CVE-2019-8950 affects DASAN H665 devices with firmware 1.46p1-0028, where a backdoor account dnsekakf2$$ exists in /bin/login, enabling login to the admin account via TELNET. The issue is confirmed across multiple sources in connected documents (e.g., PT-2019-19276), which describe a backdoor in ...

10CVSS9.3AI score0.00892EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2019/02/20 4:0 a.m.15 views

CVE-2019-8950

The backdoor account dnsekakf2$$ in /bin/login on DASAN H665 devices with firmware 1.46p1-0028 allows an attacker to login to the admin account via TELNET...

9.4AI score0.00892EPSS
Exploits1References2
OSV
OSV
added 2018/03/09 5:29 p.m.1 views

CVE-2017-17222

Import Language Package function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated, remote attacker can craft and send the packets to the affected products after Language Package is uploaded. Due to insufficient...

8.8CVSS6.5AI score
Exploits0References1
Prion
Prion
added 2018/03/09 5:29 p.m.14 views

Remote code execution

Import Signal Tone function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated, remote attacker can craft and send the packets to the affected products after the Signal Tone is uploaded. Due to insufficient...

6.5CVSS9AI score0.0081EPSS
Exploits0References1Affected Software2
CVE
CVE
added 2018/03/09 5:0 p.m.52 views

CVE-2017-17223

Huawei eSpace 7910, 7950, and 8950 devices (V200R003C30/0: eSpace 7910 V200R003C30; eSpace 7950 V200R003C30; eSpace 8950 V200R003C00/0; V200R003C30) are affected by a directory traversal vulnerability. An authenticated, remote attacker can craft a specific URL, exploiting insufficient URL verific...

8.8CVSS8.4AI score0.00613EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2018/03/09 5:0 p.m.9 views

CVE-2017-17222

Import Language Package function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated, remote attacker can craft and send the packets to the affected products after Language Package is uploaded. Due to insufficient...

9.1AI score0.0081EPSS
Exploits0References1
Rows per page
Query Builder