Lucene search
+L

104 matches found

osv_mini
osv_mini
•added 2026/08/04 2:00 p.m.•14 views

MINI-G467-4256-GF83

Bulletin has no description...

7.5CVSS7AI score0.01852EPSS
SaveExploits1
Circl
Circl
•added 2026/07/09 2:52 p.m.•26 views

CVE-2026-4256

creationtimestamp| type| source ---|---|--- 2026-07-09 14:52:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7v5f3nus2i...

8.2CVSS5.8AI score0.00354EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/09 2:16 p.m.•43 views

CVE-2026-4256

Improper neutralization of special elements used in an LDAP query 'LDAP injection' vulnerability in PEAKUP Technology Inc. PassGate allows LDAP Injection. This issue affects PassGate: through 30042026...

8.2CVSS0.00354EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/09 1:15 p.m.•65 views

CVE-2026-4256 LDAP Injection in PEAKUP's PassGate

Improper neutralization of special elements used in an LDAP query 'LDAP injection' vulnerability in PEAKUP Technology Inc. PassGate allows LDAP Injection. This issue affects PassGate: through 30042026...

8.2CVSS0.00354EPSS
SaveExploits0References1
Mend
Mend
•added 2026/05/16 4:20 a.m.•2 views

MSC-2026-4256

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Suspect publisher – this publisher has a histor...

8.8CVSS5.8AI score
SaveExploits0References1
osv_cga
osv_cga
•added 2026/05/09 1:52 a.m.•3 views

CGA-4256-WXW2-W4WQ

Bulletin has no description...

7.5CVSS7.1AI score0.00875EPSS
SaveExploits0References128
EUVD
EUVD
•added 2026/01/23 2:28 p.m.•19 views

EUVD-2026-4256

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in COP UX Flat ux-flat allows Stored XSS.This issue affects UX Flat: from n/a through = 5.4.0...

5.4CVSS5.4AI score0.00225EPSS
SaveExploits0References2
osv_opensuse
osv_opensuse
•added 2025/11/27 12:29 p.m.•12 views

OPENSUSE-SU-2025:20119-1 Security update for tcpreplay

This update for tcpreplay fixes the following issues: - update to 4.5.2: features added since 4.4.4 - fix/recalculate header checksum for ipv6-frag - IPv6 frag checksum support - AFXDP socket support - tcpreplay -w write into a pcap file - tcpreplay --fixhdrlen - --include and --exclude options -...

7.8CVSS6AI score0.00673EPSS
SaveExploits10References22
OpenVAS
OpenVAS
•added 2025/07/29 12:00 a.m.•11 views

Debian: Security Advisory (DLA-4256-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.9AI score0.00558EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/05/23 7:37 a.m.•21 views

CVE-2024-4256

A vulnerability was found in Techkshetra Info Solutions Savsoft Quiz 6.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /public/index.php/Qbank/editCategory of the component Category Page. The manipulation of the argument categoryname with the inpu...

4.8CVSS3.2AI score0.00519EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:46 a.m.•24 views

CVE-2022-4256

The All-in-One Addons for Elementor WordPress plugin before 2.4.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite...

4.8CVSS5.7AI score0.00493EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:29 a.m.•19 views

CVE-2011-4256

The RV30 codec in RealNetworks RealPlayer before 15.0.0 and Mac RealPlayer before 12.0.0.1703 does not initialize an unspecified index value, which allows remote attackers to execute arbitrary code via unknown vectors...

10CVSS6.8AI score0.04255EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/07 1:25 a.m.•47 views

CVE-2025-4256

A vulnerability classified as problematic was found in SeaCMS 13.2. This vulnerability affects unknown code of the file /adminpaylog.php. The manipulation of the argument cstatus leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and...

5.4CVSS3.4AI score0.00318EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/05/07 12:00 a.m.•4 views

RockyLinux 8 : less (RLSA-2024:4256)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:4256 advisory. less: OS command injection CVE-2024-32487 less: missing quoting of shell metacharacters in LESSCLOSE handling CVE-2022-48624 Tenable has extracted the...

8.6CVSS7.2AI score0.01059EPSS
SaveExploits0References5
Circl
Circl
•added 2025/05/05 1:18 a.m.•41 views

CVE-2025-4256

creationtimestamp| type| source ---|---|--- 2025-05-05 01:18:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14820 2025-05-05 04:15:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lofj2q2rth2o 2025-05-05 05:50:26+00:00| seen|...

5.4CVSS5.2AI score0.00318EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2025/05/05 12:31 a.m.•56 views

CVE-2025-4256 SeaCMS admin_paylog.php cross site scripting

A vulnerability classified as problematic was found in SeaCMS 13.2. This vulnerability affects unknown code of the file /adminpaylog.php. The manipulation of the argument cstatus leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and...

5.1CVSS0.00318EPSS
SaveExploits1References5
CVE
CVE
•added 2025/05/05 12:31 a.m.•96 views

CVE-2025-4256

CVE-2025-4256 affects SeaCMS 13.2 in the /admin_paylog.php handler. The cstatus parameter, when manipulated, enables cross-site scripting. The flaw is exploitable remotely, and the public exploit has been disclosed. References list SeaCMS 13.2 and the vulnerable file; no vendor-provided patch/ver...

5.4CVSS3.4AI score0.00318EPSS
SaveExploits1References5Affected Software1
Circl
Circl
•added 2025/04/10 6:49 p.m.•22 views

CVE-2022-4256

creationtimestamp| type| source ---|---|--- 2025-04-10 18:49:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11313...

4.8CVSS5.4AI score0.00493EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
•added 2024/10/21 12:00 a.m.•35 views

Adobe Digital Editions < 4.5.2 Multiple Vulnerabilities (APSB16-28) (macOS)

The version of Adobe Digital Editions installed on the remote macOS host is prior to 4.5.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB16-28 advisory. - Use-after-free vulnerability in Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary...

10CVSS9.1AI score0.05813EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2024/07/03 12:00 a.m.•38 views

AlmaLinux 8 : less (ALSA-2024:4256)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2024:4256 advisory. less: OS command injection CVE-2024-32487 less: missing quoting of shell metacharacters in LESSCLOSE handling CVE-2022-48624 Tenable has extracted the...

8.6CVSS7.2AI score0.01059EPSS
SaveExploits0References3
Rows per page
Query Builder