53 matches found
CGA-R782-9386-Q4V6
Bulletin has no description...
CVE-2026-9386
creationtimestamp| type| source ---|---|--- 2026-06-22 02:46:57+00:00| seen| https://bsky.app/profile/securitycyberuk.bsky.social/post/3motuntmise2z...
MINI-35C8-QVPQ-9386
Bulletin has no description...
MINI-526M-9386-QQ8C
Bulletin has no description...
OPENSUSE-SU-2025:20119-1 Security update for tcpreplay
This update for tcpreplay fixes the following issues: - update to 4.5.2: features added since 4.4.4 - fix/recalculate header checksum for ipv6-frag - IPv6 frag checksum support - AFXDP socket support - tcpreplay -w write into a pcap file - tcpreplay --fixhdrlen - --include and --exclude options -...
SUSE CVE-2025-9386
A vulnerability has been found in appneta tcpreplay up to 4.5.1. The impacted element is the function getl2lenprotocol of the file get.c of the component tcprewrite. Such manipulation leads to use after free. The attack must be carried out locally. The exploit has been disclosed to the public and...
CVE-2025-9386
creationtimestamp| type| source ---|---|--- 2025-08-24 14:44:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx5pwm4ygg2q...
CVE-2025-9386
A vulnerability has been found in appneta tcpreplay up to 4.5.1. The impacted element is the function getl2lenprotocol of the file get.c of the component tcprewrite. Such manipulation leads to use after free. The attack must be carried out locally. The exploit has been disclosed to the public and...
CVE-2025-9386 appneta tcpreplay tcprewrite get.c get_l2len_protocol use after free
A vulnerability has been found in appneta tcpreplay up to 4.5.1. The impacted element is the function getl2lenprotocol of the file get.c of the component tcprewrite. Such manipulation leads to use after free. The attack must be carried out locally. The exploit has been disclosed to the public and...
MAL-2025-9386 Malicious code in @supernpm2024/voluptatem-eius-officia-voluptatem (npm)
The package @supernpm2024/voluptatem-eius-officia-voluptatem was found to contain malicious code...
CVE-2024-9386
The Exclusive Divi – Divi Preloader, Modules for Divi & Extra Theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
CVE-2020-9386
In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2, file metadata information is disclosed to group members in the Elasticsearch result list despite them not having access to that artefact anymore...
Linux Distros Unpatched Vulnerability : CVE-2016-9386
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow local HVM guest users to gain privileges...
CVE-2018-9386
In rebootblockcommand of htc rebootblock driver, there is a possible stack buffer overflow due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-9386
creationtimestamp| type| source ---|---|--- 2024-11-16 04:10:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113490671272696475 2024-11-16 06:02:22+00:00| seen| https://t.me/cvedetector/11207...
CVE-2024-9386 Exclusive Divi – Divi Preloader, Modules for Divi & Extra Theme <= 1.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
The Exclusive Divi – Divi Preloader, Modules for Divi & Extra Theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...
CVE-2024-9386
CVE-2024-9386 affects the WordPress plugin “Exclusive Divi – Divi Preloader, Modules for Divi & Extra Theme” (versions up to 1.4). Root cause: Stored Cross-Site Scripting via SVG uploads due to insufficient input sanitization and output escaping. Impact: authenticated attackers with Author-level ...
WordPress Exclusive Divi Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)
Software Exclusive Divi Type Plugin Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9386 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID b259e14ef45d Credits Francesco Carlucci Required...
SUSE: Security Advisory (SUSE-SU-2016:3273-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2016:3044-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...