80 matches found
Medium: perl-Net-CIDR-Lite
Issue Overview: Net::CIDR::Lite versions before 0.23 for Perl does not validate IPv6 group count, which may allow IP ACL bypass. packipv6 does not check that uncompressed IPv6 addresses without :: have exactly 8 hex groups. Inputs like "abcd", "1:2:3", or "1:2:3:4:5:6:7" are accepted and produce...
EUVD-2026-4291
In the Linux kernel, the following vulnerability has been resolved: libceph: make freechooseargmap resilient to partial allocation freechooseargmap may dereference a NULL pointer if its caller fails after a partial allocation. For example, in decodechooseargs, if allocation of argmap-args fails,...
CVE-2018-4291
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6...
CVE-2025-4291
creationtimestamp| type| source ---|---|--- 2025-05-05 22:19:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15005 2025-05-06 00:22:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lohmhbdrwe2j 2025-05-06 01:55:48+00:00| seen|...
CVE-2025-4291 IdeaCMS saveUpload unrestricted upload
A vulnerability, which was classified as critical, was found in IdeaCMS up to 1.6. Affected is the function saveUpload. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used...
CVE-2025-4291
IdeaCMS up to version 1.6 is affected by a vulnerability in the saveUpload function that allows unrestricted file uploads. The issue enables remote exploitation and has publicly disclosed exploit information. Connected sources corroborate the vulnerability in saveUpload and describe it as critica...
curl: Incorrect Type Conversion in interpreting IPv4-mapped IPv6 addresses and below `curl` results in indeterminate SSRF vulnerabilities.
Vulnerability description not provided...
openSUSE: Security Advisory for poppler (SUSE-SU-2023:4291-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-4291
creationtimestamp| type| source ---|---|--- 2023-09-21 12:30:49+00:00| seen| https://t.me/cibsecurity/70869...
CVE-2023-4291
Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a remote code execution RCE vulnerability via manipulated parameters of the web interface without authentication. This could lead to a full compromise of the FDS101 device...
CVE-2023-4291 Frauscher FDS101 for FAdC/FAdCi remote code execution vulnerability
Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a remote code execution RCE vulnerability via manipulated parameters of the web interface without authentication. This could lead to a full compromise of the FDS101 device...
CVE-2023-4291
CVE-2023-4291 affects Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi versions 1.4.24 and all earlier versions. The issue is a remote code execution (RCE) vulnerability via manipulated parameters of the device’s web interface without authentication, potentially allowing full device compromise....
Wireshark 1.4.x < 1.4.15 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.4.15. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.4.15 advisory. - Buffer overflow in epan/dissectors/packet-rtps2.c in the RTPS2 dissector in Wireshark 1.4.x before...
CVE-2021-4291
The CVE-2021-4291 affects OpenMRS Admin UI Module up to v1.5.x, with exploitation targeting the file omod/src/main/webapp/pages/metadata/locations/location.gsp and enabling cross-site scripting. Remote attacker can trigger the issue; upgrading to v1.6.0 addresses it (patch: a7eefb5f69f6c50a3bffcb...
CVE-2022-4291
The aswjsflt.dll library from Avast Antivirus windows contained a potentially exploitable heap corruption vulnerability that could enable an attacker to bypass the sandbox of the application it was loaded into, if applicable. This issue was fixed in version 18.0.1478 of the Script Shield Componen...
CVE-2022-4291
CVE-2022-4291 affects Avast Antivirus on Windows via the aswjsflt.dll in the Script Shield component, where a heap corruption could allow bypassing the application sandbox. The issue was fixed in Script Shield 18.0.1478. Some sources also note that the vulnerability could cause a Mozilla Firefox ...
CVE-2022-4291 Aswjsflt.dll in Avast Antivirus windows caused a crash of the Mozilla Firefox browser due to heap corruption
The aswjsflt.dll library from Avast Antivirus windows contained a potentially exploitable heap corruption vulnerability that could enable an attacker to bypass the sandbox of the application it was loaded into, if applicable. This issue was fixed in version 18.0.1478 of the Script Shield Componen...
CVE-2019-4291
creationtimestamp| type| source ---|---|--- 2022-02-16 20:42:16+00:00| seen| https://t.me/cibsecurity/37605...
CVE-2019-4291
IBM Maximo Anywhere 7.6.4.0 could allow an attacker to reverse engineer the application due to the lack of binary protection precautions. IBM X-Force ID: 160697...
CVE-2019-4291
CVE-2019-4291 affects IBM Maximo Anywhere 7.6.4.0, where lack of binary protection allows reverse engineering of the application due to missing binary obfuscation. Public sources from NVD/IBM/X-Force corroborate a medium-severity issue (CVSS v3.1 base score 6.5; v2 base 6.4) with network access a...