CVE-2018-9478

In processserviceattrreq and processservicesearchattrreq of sdpserver.cc, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9478

creationtimestamp| type| source ---|---|--- 2024-11-20 17:35:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113516486676336154 2024-11-20 19:36:29+00:00| seen| https://t.me/cvedetector/11650 2026-06-21 11:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mosa5gorz72r...

CVE-2024-9478

Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation.This issue affects upKeeper Instant Privilege Access: before 1.2...

CVE-2024-9478

creationtimestamp| type| source ---|---|--- 2024-11-20 13:34:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113515539282278242 2024-11-20 16:15:08+00:00| seen| https://t.me/cvedetector/11605...

CVE-2024-9478

Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation.This issue affects upKeeper Instant Privilege Access: before 1.2...

CVE-2024-9478

CVE-2024-9478 concerns an Improper Privilege Management vulnerability in upKeeper Solutions’ upKeeper Instant Privilege Access, affecting versions prior to 1.2. The vulnerability enables Privilege Escalation due to improper privilege handling in the product’s privilege management component. Affec...

CGA-MXWR-9478-QX2R

Bulletin has no description...

Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2022-9478)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-9478 advisory. - perf: Fix sysperfeventopen race against self Peter Zijlstra Orabug: 34207044 CVE-2022-1729 - debug: Lock down kgdb Stephen Brennan Orabug: 34207043...

Oracle Linux 7 : openssl (ELSA-2021-9478)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9478 advisory. - fix CVE-2021-23841 openssl: NULL pointer dereference in X509issuerandserialhash - fix CVE-2021-23840 openssl: integer overflow in CipherUpdate Tenabl...

CVE-2020-9478

CVE-2020-9478 affects Rubrik 5.0.3-2296. The vulnerability is an OS command injection that permits an authenticated attacker to remotely execute arbitrary code on Rubrik-managed systems. Exploitation details, affected components beyond the product/version, and concrete remediation steps are not p...

CVE-2015-9478

creationtimestamp| type| source ---|---|--- 2019-10-10 20:31:19+00:00| seen| https://t.me/cibsecurity/7338...

CVE-2015-9478

prettyPhoto before 3.1.6 has js/jquery.prettyPhoto.js XSS...

CVE-2015-9478

CVE-2015-9478 affects prettyPhoto prior to 3.1.6, specifically the getHashtag function in js/jquery.prettyPhoto.js, enabling a DOM-based XSS when user-supplied data after the # is not encoded. Impact is described as XSS with partial integrity/low confidentiality impact in public CVE notes; exact ...

CVE-2018-9478

...

CVE-2017-9478

The CVE-2017-9478 entry concerns Cisco DPC3939 firmware (dpc3939-P20-18-v303r20421733-160420a-CMCST and dpc3939-P20-18-v303r20421746-170221a-CMCST). The root cause is that the CM MAC address is set to a value with a two-byte offset from the MTA/VoIP MAC address, and this embedding into DNS hostna...

CVE-2016-9478

...

CVE-2016-9478

This CVE-2016-9478 entry is rejected, not used, and does not represent an active vulnerability.

MediaWiki ExpandTemplates Extension < 1.24.1 Multiple Vulnerabilities (Jan 2015) - Active Check

The ExpandTemplates extension for MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-9478

Cross-site scripting XSS vulnerability in the preview in the ExpandTemplates extension for MediaWiki, when $wgRawHTML is set to true, allows remote attackers to inject arbitrary web script or HTML via the wpInput parameter to the Special:ExpandTemplates page...

CVE-2014-9478

CVE-2014-9478 affects the MediaWiki ExpandTemplates extension. The vulnerability is a cross-site scripting (XSS) flaw in the preview mode when $wgRawHTML is true, allowing remote attackers to inject arbitrary script/HTML via the wpInput parameter on Special:ExpandTemplates. OpenVAS notes this as ...