114 matches found
ROOT-OS-UBUNTU-2404-CVE-2023-4010 CVE-2023-4010 in rootio-linux - Patched by Root
Root has patched CVE-2023-4010 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2023-4010 CVE-2023-4010 in rootio-linux - Patched by Root
Root has patched CVE-2023-4010 in the rootio-linux package for Root:Debian:11. Multiple fixed versions available...
CVE-2026-4010 ThakeeNathees pocketlang pkByteBufferAddString memory corruption
A vulnerability was found in ThakeeNathees pocketlang up to cc73ca61b113d48ee130d837a7a8b145e41de5ce. The affected element is the function pkByteBufferAddString. The manipulation of the argument length with the input 4294967290 results in memory corruption. The attack requires a local approach. T...
CVE-2026-4010
creationtimestamp| type| source ---|---|--- 2026-03-12 07:16:11+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4010 2026-03-12 09:09:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgu2hxtogc2e...
MiracleLinux 8 : xorg-x11-server-1.20.11-5.el8, xorg-x11-server-Xwayland-21.1.3-2.el8 (AXSA:2022-3547:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-3547:01 advisory. xorg-x11-server: SProcRenderCompositeGlyphs out-of-bounds access CVE-2021-4008 xorg-x11-server: SProcXFixesCreatePointerBarrier out-of-bounds access...
CVE-2023-4010 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-qemu, linux-qemu-melange...
Code Execution Vulnerabilities in Multiple Advantech Products
The Advantech WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN are all industrial automation controllers from Advantech of Taiwan, China. A code execution vulnerability exists in multiple Advantech products, which can be exploited by attackers to inject or modify firmware via the JTAG interface...
Advantech多款产品 安全漏洞
The Advantech WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN are all industrial automation controllers from Advantech of Taiwan, China. A cross-site scripting vulnerability exists in multiple Advantech products. The vulnerability stems from the lack of effective filtering and escaping of...
Advantech多款产品 安全漏洞
The Advantech WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN are all industrial automation controllers from Advantech of Taiwan, China. An information disclosure vulnerability exists in multiple Advantech products, which can be exploited by attackers to cause data interception and session hijacking...
Advantech多款产品 安全漏洞
The Advantech WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN are all industrial automation controllers from Advantech of Taiwan, China. A command execution vulnerability exists in multiple Advantech products, which can be exploited by an attacker to remotely control a relay channel...
TencentOS Server 3: xorg-x11-server-Xwayland (TSSA-2022:0228)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0228 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
CVE-2025-4010
creationtimestamp| type| source ---|---|--- 2025-06-02 08:01:07+00:00| published-proof-of-concept| Telegram/MNJNzGAF9bpm-8pO2mYbfB9j1qFTK3WJrzpGubMjm4ci4gI 2025-06-02 10:52:28+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lqmmbojath2a...
CVE-2025-4010 Arbitrary Command Injection in Netcom NTC-6200 & NWL-222
The Netcom NTC 6200 and NWL 222 series expose a web interface to be configured and set up by operators. Multiple endpoints of the web interface are vulnerable to arbitrary command injection and use insecure hardcoded passwords. Remote authenticated attackers can gain arbitrary code execution with...
Linux Distros Unpatched Vulnerability : CVE-2023-4010
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the USB Host Controller Driver framework in the Linux kernel. The usbgivebackurb function has a logic loophole in its implementation. Due to...
CVE-2024-4010 Email Subscribers by Icegram Express <= 5.7.19 - Missing Authorization in handle_ajax_request
The Email Subscribers by Icegram Express plugin for WordPress is vulnerable to unauthorized access of data, modification of data, and loss of data due to a missing capability check on the handleajaxrequest function in all versions up to, and including, 5.7.19. This makes it possible for...
WordPress Email Subscribers & Newsletters Plugin <= 5.7.19 is vulnerable to Broken Access Control
Software Email Subscribers & Newsletters Type Plugin Vulnerable versions = 5.7.19 Fixed in 5.7.20 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-4010 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID cfe3d5ec0618 Credits Arkadiusz...
CentOS 9 : xorg-x11-server-Xwayland-21.1.3-5.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the xorg-x11-server-Xwayland-21.1.3-5.el9 build changelog. - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in...
PT-2023-9645 · Cisco · Cisco Industrial Ethernet 5000 +3
Name of the Vulnerable Software and Affected Versions: Cisco Industrial Ethernet 4000, 4010, and 5000 Series Switches affected versions not specified Description: The issue is related to the incorrect handling of IPv4 access control lists ACLs on switched virtual interfaces when an administrator...
Rocky Linux 8 : xorg-x11-server and xorg-x11-server-Xwayland (RLSA-2022:1917)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:1917 advisory. - A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcRenderCompositeGlyphs...
BELL-CVE-2021-4010 CVE-2021-4010 does not affect BellSoft software
Bulletin has no description...