MSC-2026-9408

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...

CVE-2026-9408

A vulnerability was detected in Totolink A8000RU 7.1cu.643b20200521. Affected by this issue is the function setStaticDhcpRules of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. The manipulation of the argument enable results in os command injection. The attack may be...

CVE-2026-9408

creationtimestamp| type| source ---|---|--- 2026-05-25 01:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116632625460794481 2026-05-25 01:30:32+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmnddk3og42y 2026-06-22 03:17:16+00:00| seen|...

AZL-9408 CVE-2022-27444 for package mariadb is not applicable

This CVE either no longer is or was never applicable...

MiracleLinux 9 : thunderbird-128.4.0-1.el9_5.ML.2 (AXSA:2024-9408:29)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2024-9408:29 advisory. firefox: Use-after-free in Animation timeline 128.3.1 ESR Chemspill CVE-2024-9680 firefox: thunderbird: History interface could have been used to...

CVE-2025-9408

creationtimestamp| type| source ---|---|--- 2025-11-11 17:49:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5ep3nt6b52q 2025-11-11 18:10:55+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5eqc23mmhz2...

MAL-2025-9408 Malicious code in @taktikangea/cupiditate-esse (npm)

The package @taktikangea/cupiditate-esse was found to contain malicious code...

CVE-2024-9408

creationtimestamp| type| source ---|---|--- 2025-07-16 16:26:04+00:00| seen| Telegram/lldmnKbSNqlvcatJfNBdaPzci4xx1JWiYLut4SlQoq26XQ8...

org.glassfish.main.admingui:console-cluster-plugin (4.1), org.glassfish.main.admingui:console-common-full-plugin (4.1) +11 more potentially affected by CVE-2024-9408 via org.glassfish.main.admingui:console-common (4.1)

org.glassfish.main.admingui:console-common MAVEN version 4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 4.1 -...

org.glassfish.main.admingui:console-cluster-plugin (4.1.2), org.glassfish.main.admingui:console-common-full-plugin (4.1.2) +11 more potentially affected by CVE-2024-9408 via org.glassfish.main.admingui:console-common (4.1.2)

org.glassfish.main.admingui:console-common MAVEN version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.glassfish.main.admingui:console-common and may be impacted: - org.glassfish.main.admingui:console-cluster-plugin 4.1.2 -...

org.glassfish.main.admingui:console-cluster-plugin (>=3.1.2, <=9.0.0-m3), org.glassfish.main.admingui:console-commandrecorder-plugin (>=7.0.16, <=9.0.0-m3) +16 more potentially affected by CVE-2024-9408 via org.glassfish.main.admingui:console-common (>=3.1.2, <=9.0.0-m3)

org.glassfish.main.admingui:console-common MAVEN version =3.1.2, =3.1.2, =7.0.16, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =3.1.2, =4.0-b72, =7.1.1, =3.1.2, =4.0-b72, =3.1.2, =4.0-b90, =4.0-b90, =6.2.5, =9.0.0-m3 and more Source cves: CVE-2024-9408 Source advisory:...

CVE-2024-9408

In Eclipse GlassFish since version 6.2.5 it is possible to perform a Server Side Request Forgery attack in specific endpoints...

CVE-2024-9408

In Eclipse GlassFish since version 6.2.5 it is possible to perform a Server Side Request Forgery attack in specific endpoints...

CVE-2024-9408

In Eclipse GlassFish since version 6.2.5 it is possible to perform a Server Side Request Forgery attack in specific endpoints...

CVE-2024-9408

In Eclipse GlassFish since version 6.2.5 it is possible to perform a Server Side Request Forgery attack in specific endpoints...

CVE-2019-9408

In libavc there is a possible information disclosure due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112380157...

Linux Distros Unpatched Vulnerability : CVE-2017-9408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Poppler 0.54.0, a memory leak vulnerability was found in the function Object::initArray in Object.cc, which allows attackers to cause a denial of service via...

CVE-2018-9408

creationtimestamp| type| source ---|---|--- 2024-12-05 01:58:07+00:00| seen| https://t.me/cvedetector/12044...

CVE-2018-9408

The CVE-2018-9408 issue affects the GPS subsystem, specifically the m3326_gps_write and m3326_gps_read handlers in gps.s. The vulnerability is described as an out-of-bounds read caused by a missing bounds check, enabling local information disclosure with system execution privileges required. Expl...

CVE-2018-9408

In m3326gpswrite and m3326gpsread of gps.s, there is a possible Out Of Bounds Read due to a missing bounds check. This could lead to a local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...