EUVD-2026-4099

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Ninetheme Anarkali anarkali allows PHP Local File Inclusion.This issue affects Anarkali: from n/a through = 1.0.9...

MiracleLinux 4 : libcap-2.16-5.5.AXS4 (AXSA:2012-32:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-32:01 advisory. libcap is a library for getting and setting POSIX.1e formerly POSIX 6 draft 15 capabilities. Security issues fixed with this release: CVE-2011-4099 No...

EUVD-2013-4099

Malware in sbrugna...

CVE-2024-4099

An issue has been discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.2.8, from 17.3 prior to 17.3.4, and from 17.4 prior to 17.4.1. An AI feature was found to read unsanitized content in a way that could have allowed an attacker to hide prompt injection...

CVE-2012-4099

The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service BGP service reset and resync via a malformed UPDATE message, aka Bug ID CSCtn13065...

CVE-2025-4099

creationtimestamp| type| source ---|---|--- 2025-05-01 05:14:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14236 2025-05-01 05:56:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo3mslbkuk2k 2025-05-01 08:58:36+00:00| seen|...

CVE-2025-4099

CVE-2025-4099 : WordPress List Children plugin (versions ≤ 2.1) is vulnerable to Stored XSS via the plugin shortcode “list_children” due to insufficient input sanitization and output escaping. Exploitation requires authenticated access at contributor level or higher and can inject scripts execute...

WordPress List Children plugin <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by muhammad yudha in WordPress Plugin List Children versions = 2.1...

DLA-4099-1 flatpak - security update

Bulletin has no description...

openSUSE Security Advisory (SUSE-SU-2024:4099-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-4099

creationtimestamp| type| source ---|---|--- 2024-09-27 02:22:25+00:00| seen| https://t.me/cvedetector/6471...

CVE-2024-4099 Improper Encoding or Escaping of Output in GitLab

An issue has been discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.2.8, from 17.3 prior to 17.3.4, and from 17.4 prior to 17.4.1. An AI feature was found to read unsanitized content in a way that could have allowed an attacker to hide prompt injection...

CVE-2024-4099 Improper Encoding or Escaping of Output in GitLab

An issue has been discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.2.8, from 17.3 prior to 17.3.4, and from 17.4 prior to 17.4.1. An AI feature was found to read unsanitized content in a way that could have allowed an attacker to hide prompt injection...

CVE-2024-4099

Removed by vendor...

CVE-2023-4099

The CVE-2023-4099 issue affects QSige Monitor: the application lacks an access-control check to confirm a user’s permissions before accessing a resource, requiring login as a prerequisite. Core detail across connected documents confirms this is an authorization bypass/Privilege Management flaw in...

CVE-2023-4099 Multiple vulnerabilities in IDM Sistemas QSige

The QSige Monitor application does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application...

CVE-2023-4099 Multiple vulnerabilities in IDM Sistemas QSige

The QSige Monitor application does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application...

Oracle Linux 9 : bind (ELSA-2023-4099)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4099 advisory. 32:9.16.23-11.1 - Improve RBT overmem cache cleaning CVE-2023-2828 Tenable has extracted the preceding description block directly from the Oracle Linux security...

RHEL 9 : bind (RHSA-2023:4099)

"The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4099 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named %NASLMINLEVEL...

K16880: Libcap vulnerability CVE-2011-4099

Security Advisory Description Description The capsh program in libcap before 2.22 does not change the current working directory when the --chroot option is specified, which allows local users to bypass the chroot restrictions via unspecified vectors. CVE-2011-4099 Impact None. F5 products are not...