122 matches found
ECHO-D1FE-BE89-4158
Bulletin has no description...
CVE-2026-4158
creationtimestamp| type| source ---|---|--- 2026-04-11 03:05:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj6u56q3se2r 2026-04-11 03:21:29+00:00| seen| Telegram/9p2zwy9MZzhVwoc6VK1G-jeZ0lfiSFc0xC5yOTrHz-Zg8Sw...
EUVD-2026-4158
Authorization Bypass Through User-Controlled Key vulnerability in Solvera Software Services Trade Inc. Teknoera allows Exploitation of Trusted Identifiers.This issue affects Teknoera: through 01102025...
CVE-2024-4158
The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tagName’ parameter in versions up to, and including, 2.0.42 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and...
Debian: Security Advisory (DLA-4158-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DLA-4158-1 fossil - HTTP client fix
Bulletin has no description...
CVE-2025-4158
A vulnerability was found in PCMan FTP Server up to 2.0.7. It has been classified as critical. Affected is an unknown function of the component PROMPT Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the...
CVE-2025-4158
A vulnerability was found in PCMan FTP Server up to 2.0.7. It has been classified as critical. Affected is an unknown function of the component PROMPT Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the...
Linux Distros Unpatched Vulnerability : CVE-2021-4158
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest could use this flaw to crash the QEMU process...
Linux Distros Unpatched Vulnerability : CVE-2012-4158
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adobe Reader and Acrobat 9.x before 9.5.2 and 10.x before 10.1.4 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service...
Azure Linux 3.0 Security Update: qemu (CVE-2021-4158)
The version of qemu installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-4158 advisory. - A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the...
CVE-2024-4158
creationtimestamp| type| source ---|---|--- 2025-01-28 04:09:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3221...
Adobe Creative Cloud < 3.7.0.272 Multiple Vulnerabilities (APSB16-21)
The version of Adobe Creative Cloud installed on the remote Windows host is prior to 3.7.0.272. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB16-21 advisory. - Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.7.0.272...
CentOS 6 : thunderbird (RHSA-2020:4158)
The remote CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4158 advisory. - Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some of these bugs showed evidence of memory corruption an...
CBL Mariner 2.0 Security Update: qemu (CVE-2021-4158)
The version of qemu installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-4158 advisory. - A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the...
RHEL 8 : av_qemu-kvm (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - QEMU: NULL pointer dereference in pciwrite in hw/acpi/pcihp.c CVE-2021-4158 - QEMU: am53c974: denial of...
CVE-2024-4158 Blocksy <= 2.0.42 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tagName’ parameter in versions up to, and including, 2.0.42 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and...
WordPress Blocksy Theme <= 2.0.42 is vulnerable to Cross Site Scripting (XSS)
Software Blocksy Type Theme Vulnerable versions = 2.0.42 Fixed in 2.0.43 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4158 Patch priority Low CVSS severity Low 6.5 Developer Creative Themes PSID b23a35db53be Credits Ngô Thiên An ancorn Required...
