ECHO-601A-4090-0CA3

Bulletin has no description...

CVE-2026-4090

creationtimestamp| type| source ---|---|--- 2026-04-23 20:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mk6ub5fm4m2s...

Siemens SIMATIC Devices Out-of-bounds Write (CVE-2021-4090)

An out-of-bounds OOB memory write flaw was found in the NFSD in the Linux kernel. Missing sanity may lead to a write beyond bmvalbmlen-1 in nfsd4decodebitmap4 in fs/nfsd/nfs4xdr.c. In this flaw, a local attacker with user privilege may gain access to out-of-bounds memory, leading to a system...

ECHO-D129-E303-4090

Bulletin has no description...

CVE-2013-4090

Varnish HTTP cache before 3.0.4: ACL bug...

CVE-2025-4090

creationtimestamp| type| source ---|---|--- 2025-04-29 15:50:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnxn32strg2r 2025-04-29 16:49:44+00:00| seen| https://t.me/cvedetector/24001...

CVE-2025-4090

A vulnerability existed in Thunderbird for Android where potentially sensitive library locations were logged via Logcat. This vulnerability affects Firefox 138 and Thunderbird 138...

CVE-2025-4090

A vulnerability existed in Thunderbird for Android where potentially sensitive library locations were logged via Logcat. This vulnerability was fixed in Firefox 138 and Thunderbird 138...

DLA-4090-1 ruby-rack - security update

Bulletin has no description...

CVE-2024-4090

creationtimestamp| type| source ---|---|--- 2024-08-01 08:44:05+00:00| seen| https://t.me/cvedetector/2216...

CVE-2024-4090 My Sticky Bar < 2.7.2 - Admin+ Stored XSS

The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any WordPress plugin before 2.7.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredht...

CVE-2024-4090

CVE-2024-4090 affects WordPress plugin My Sticky Bar (formerly myStickymenu) up to version 2.7.1. The issue is an admin/high-privilege stored XSS due to the plugin not sanitising or escaping certain settings, enabling an authenticated attacker to inject scripts. Patchstack and CVE records confirm...

CVE-2024-4090 My Sticky Bar < 2.7.2 - Admin+ Stored XSS

The Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any WordPress plugin before 2.7.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredht...

WordPress My Sticky Bar Plugin < 2.7.2 is vulnerable to Cross Site Scripting (XSS)

Software My Sticky Bar Type Plugin Vulnerable versions 2.7.2 Fixed in 2.7.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4090 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID dec5e0412400 Credits Krugov Artyom Required...

CVE-2023-4090

creationtimestamp| type| source ---|---|--- 2023-10-04 16:12:01+00:00| seen| https://t.me/cibsecurity/71571...

CVE-2023-4090

Cross-site Scripting XSS reflected vulnerability on WideStand until 5.3.5 version, which generates one of the meta tags directly using the content of the queried URL, which would allow an attacker to inject HTML/Javascript code into the response...

CVE-2023-4090

Cross-site Scripting XSS reflected vulnerability on WideStand until 5.3.5 version, which generates one of the meta tags directly using the content of the queried URL, which would allow an attacker to inject HTML/Javascript code into the response...

CVE-2023-4090 Cross-Site Scripting (XSS) vulnerability on WideStand CMS of Acilia

Cross-site Scripting XSS reflected vulnerability on WideStand until 5.3.5 version, which generates one of the meta tags directly using the content of the queried URL, which would allow an attacker to inject HTML/Javascript code into the response...

CVE-2023-4090

WideStand CMS prior to 5.3.5 has a reflected Cross-site Scripting (XSS) vulnerability: one of the meta tags is generated directly from the queried URL’s content, enabling injection of HTML/JavaScript into the response. Affected: WideStand versions before 5.3.5. Remediation: upgrade to 5.3.5 or la...

SUSE CVE-2013-4090

Varnish HTTP cache before 3.0.4: ACL bug...