83 matches found
VulnCheck KEV: CVE-2025-4078
A vulnerability, which was classified as problematic, has been found in Wangshen SecGate 3600 2400. This issue affects some unknown processing of the file ?g=logexportfile. The manipulation of the argument filename leads to path traversal. The attack may be initiated remotely. The exploit has bee...
EUVD-2026-4078
Missing Authorization vulnerability in merkulove Audier For Elementor audier-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Audier For Elementor: from n/a through = 1.0.9...
CVE-2025-4078
A vulnerability, which was classified as problematic, has been found in Wangshen SecGate 3600 2400. This issue affects some unknown processing of the file ?g=logexportfile. The manipulation of the argument filename leads to path traversal. The attack may be initiated remotely. The exploit has bee...
CVE-2025-4078
A vulnerability, which was classified as problematic, has been found in Wangshen SecGate 3600 2400. This issue affects some unknown processing of the file ?g=logexportfile. The manipulation of the argument filename leads to path traversal. The attack may be initiated remotely. The exploit has bee...
CVE-2025-4078
creationtimestamp| type| source ---|---|--- 2025-04-29 20:12:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13903 2025-04-29 23:31:42+00:00| seen| https://t.me/cvedetector/24049 2025-04-29 23:50:51+00:00| seen|...
CVE-2025-4078 Wangshen SecGate 3600 g=log_export_file path traversal
A vulnerability, which was classified as problematic, has been found in Wangshen SecGate 3600 2400. This issue affects some unknown processing of the file ?g=logexportfile. The manipulation of the argument filename leads to path traversal. The attack may be initiated remotely. The exploit has bee...
CVE-2025-4078 Wangshen SecGate 3600 g=log_export_file path traversal
A vulnerability, which was classified as problematic, has been found in Wangshen SecGate 3600 2400. This issue affects some unknown processing of the file ?g=logexportfile. The manipulation of the argument filename leads to path traversal. The attack may be initiated remotely. The exploit has bee...
CVE-2025-4078
Summary of CVE-2025-4078 (Wangshen SecGate 3600 2400): A path traversal vulnerability exists in the ?g=log_export_file endpoint where manipulating the file_name parameter can disclose arbitrary files. The issue requires remote access and is supported by a public exploit/disclosure. The Nuclei tem...
DLA-4078-1 firefox-esr - security update
Bulletin has no description...
Linux Distros Unpatched Vulnerability : CVE-2016-4078
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not properly restrict element lists, which allows remote attackers to...
CVE-2024-4078
A vulnerability in the parisneo/lollms, specifically in the /unInstallbinding endpoint, allows for arbitrary code execution due to insufficient sanitization of user input. The issue arises from the lack of path sanitization when handling the name parameter in the unInstallbinding function, allowi...
SUSE: Security Advisory (SUSE-SU-2024:4078-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS 7 : qemu-kvm-ma (RHSA-2020:4078)
The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4078 advisory. - An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets fro...
Rocky Linux 9 : python3.9 (RLSA-2024:4078)
The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:4078 advisory. python: Path traversal on tempfile.TemporaryDirectory CVE-2023-6597 python: The zipfile module is vulnerable to zip-bombs leading to denial of service...
Oracle Linux 9 : python3.9 (ELSA-2024-4078)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-4078 advisory. - Security fixes for CVE-2023-6597 and CVE-2024-0450 Tenable has extracted the preceding description block directly from the Oracle Linux security...
RHEL 9 : python3.9 (RHSA-2024:4078)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4078 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...
CVE-2024-4078
parisneo/lollms is affected by CVE-2024-4078 through the /unInstall_binding endpoint, where insufficient sanitization of the name parameter enables directory traversal and loading of a malicious init .py, causing arbitrary code execution. The issue, reported across multiple feeds, targets the lat...
openSUSE 15 Security Update : opera (openSUSE-SU-2023:0251-1)
The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0251-1 advisory. - Use after free in Offline in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process...
KLA61309 Multiple vulnerabilities in Opera
Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Type confusion vulnerability in V8 can be exploited to cause denial of...
Chromium: CVE-2023-4078 Inappropriate implementation in Extensions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...