CVE-2017-4209

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

MiracleLinux 4 : java-1.6.0-openjdk-1.6.0.0-6.1.13.4.AXS4 (AXSA:2014-460:03)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2014-460:03 advisory. Description : The OpenJDK runtime environment. Security issues fixed with this release: CVE-2014-2490 Unspecified vulnerability in the Java SE...

MiracleLinux 4 : firefox-10.0.11-1.0.1.AXS4, xulrunner-10.0.11-1.0.1.AXS4 (AXSA:2012-1051:07)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-1051:07 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security issues fixed with this...

Linux Distros Unpatched Vulnerability : CVE-2010-4209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.8.1, as used in Bugzilla 3.7.1 through 3.7.3 and 4.1, allows...

Linux Distros Unpatched Vulnerability : CVE-2018-4209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected...

RHSA-2024:4209

creationtimestamp| type| source ---|---|--- 2025-07-05 03:15:11+00:00| seen| Telegram/xz2mmH5nmIWrLJp0VXaeukJpqyU7ikcVL-1Te4VH0IBdQ0 2025-08-03 06:50:40+00:00| seen| Telegram/kR0M1VfOWtTJanh-8ZUzu0Y5NJjZYBx0dZa5c6WLbE9rw4 2025-08-03 06:50:45+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2021-4209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined...

Advisory ROSA-SA-2025-2724

Software: gnutls 3.6.16 OS: ROSA Virtualization 3.0 packageevrstring: gnutls-3.6.16-8.0.1.rv30.1 CVE-ID: CVE-2021-4209 BDU-ID: 2022-01898 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the implementation of the wrapnettlehashfast function of the GnuTLS cryptographic library is related to pointer...

RHEL 8 : gnutls (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - GnuTLS: Null pointer dereference in MDUPDATE CVE-2021-4209 Note that Nessus has not tested for this issue but has...

CVE-2024-4209

The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the countdown timer in all versions up to, and including, 3.2.36 due to insufficient input sanitization and output escaping on user supplied attributes. This...

CVE-2024-4209

The vulnerability CVE-2024-4209 affects Gutenberg Blocks with AI by Kadence Blocks – Page Builder Features for WordPress. It is a Stored Cross-Site Scripting (XSS) via the countdown timer in versions up to 3.2.36, caused by insufficient input sanitization and output escaping on user-supplied attr...

Advisory ROSA-SA-2023-2298

Software: gnutls 3.6.16 OS: ROSA Virtualization 2.1 packageevrstring: gnutls-3.6.16-6.0.1.rv3.src.rpm CVE-ID: CVE-2021-4209 BDU-ID: 2022-01898 CVE-Crit: MEDIUM CVE-DESC.: An implementation vulnerability in the wrapnettlehashfast function of the GnuTLS cryptographic library is related to pointer...

CVE-2023-4209

creationtimestamp| type| source ---|---|--- 2023-08-30 18:12:36+00:00| seen| https://t.me/cibsecurity/69447...

CVE-2023-4209

The POEditor WordPress plugin before 0.9.8 does not have CSRF checks in various places, which could allow attackers to make logged in admins perform unwanted actions, such as reset the plugin's settings and update its API key via CSRF attacks...

WordPress POEditor Plugin <= 0.9.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software POEditor Type Plugin Vulnerable versions = 0.9.7 Fixed in 0.9.8 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-4209 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f865ac408812 Credits Dmitrii Required privilege...

EulerOS Virtualization 3.0.6.6 : gnutls (EulerOS-SA-2023-2411)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing...

Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2023-2411)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.0 : gnutls (EulerOS-SA-2023-2221)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing...

Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2023-1700)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.0 : gnutls (EulerOS-SA-2023-1700)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing...