118 matches found
CVE-2026-4313
creationtimestamp| type| source ---|---|--- 2026-04-24 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/04/CVE-2026-4313...
EUVD-2026-4313
Missing Authorization vulnerability in Sergiy Dzysyak Suggestion Toolkit suggestion-toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Suggestion Toolkit: from n/a through = 5.0...
GO-2026-4313 Gin-vue-admin has arbitrary file upload vulnerability caused by path traversal in github.com/flipped-aurora/gin-vue-admin
Gin-vue-admin has arbitrary file upload vulnerability caused by path traversal in github.com/flipped-aurora/gin-vue-admin...
MiracleLinux 7 : glibc-2.17-292.el7 (AXSA:2019-4313:05)
The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2019-4313:05 advisory. glibc: getaddrinfo should reject IP addresses with trailing characters CVE-2016-10739 Tenable has extracted the preceding description block directly from the...
MiracleLinux 4 : bind-9.7.3-8.P3.AXS4.2 (AXSA:2012-15:01)
"The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-15:01 advisory. BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names t...
MiracleLinux 3 : bind-9.3.6-16.P1.1.0.1.AXS3 (AXSA:2011-363:02)
"The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2011-363:02 advisory. BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names ...
SUSE SLES15: libpython2_7-1_0 / libpython2_7-1_0-32bit / python / python-32bit / etc (SUSE-SU-2025:4313-1)
The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:4313-1 advisory. - CVE-2025-8291: Check the validity the ZIP64 End of Central Directory EOCD. bsc1251305 Tenable has extracted the preceding description...
CVE-2022-4313
A vulnerability was reported where through modifying the scan variables, an authenticated user in Tenable products, that has Scan Policy Configuration roles, could manipulate audit policy variables to execute arbitrary commands on credentialed scan targets...
CVE-2025-4313
creationtimestamp| type| source ---|---|--- 2025-05-06 05:20:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15058 2025-05-06 06:21:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loiajoyu642j 2025-05-06 08:00:49+00:00| published-proof-of-concept|...
CVE-2025-4313 SourceCodester Advanced Web Store admin_addnew_product.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Advanced Web Store 1.0. Affected is an unknown function of the file /admin/adminaddnewproduct.php. The manipulation of the argument txtProdId leads to sql injection. It is possible to launch the attack remotely. The...
CVE-2022-4313
creationtimestamp| type| source ---|---|--- 2025-03-02 11:44:19+00:00| seen| Telegram/0dvezUyx4AEr4Aejlu6R8-2bLlstBwcSoPWtkh725ZJ4TV...
CVE-2024-4313 Table Addons for Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id Parameter
The Table Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 2.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-leve...
CVE-2022-4313
A vulnerability was reported where through modifying the scan variables, an authenticated user in Tenable products, that has Scan Policy Configuration roles, could manipulate audit policy variables to execute arbitrary commands on credentialed scan targets...
CVE-2022-4313
Summary: CVE-2022-4313 relates to Tenable products where an authenticated user with Scan Policy Configuration roles could modify audit policy variables to run arbitrary commands on credentialed scan targets, potentially leading to code execution. The vulnerability is discussed across multiple fee...
[R1] Tenable Plugin Feed ID #202212081952 Fixes Arbitrary Code Execution Vulnerability
R1 Tenable Plugin Feed ID 202212081952 Fixes Arbitrary Code Execution Vulnerability Arnie Cabral Fri, 03/10/2023 - 16:28 Audit files that are built into the Tenable products provide capability to adjust the audit evaluation to meet organizational requirements. A vulnerability was reported where...
K14204: BIND vulnerability CVE-2011-4313
Security Advisory Description ISC reports that query.c in BIND may allow remote attackers to cause a denial-of-service assertion failure and named exit. The vulnerability uses unknown vectors related to recursive DNS queries, error logging, and the caching of an invalid record by the resolver. Th...
CVE-2021-4313
A vulnerability was found in NethServer phonenehome. It has been rated as critical. This issue affects the function getinfo/getcountrycoor of the file server/index.php. The manipulation leads to sql injection. The identifier of the patch is 759c30b0ddd7d493836bbdf695cf71624b377391. It is...
CVE-2021-4313 NethServer phonenehome index.php get_country_coor sql injection
A vulnerability was found in NethServer phonenehome. It has been rated as critical. This issue affects the function getinfo/getcountrycoor of the file server/index.php. The manipulation leads to sql injection. The identifier of the patch is 759c30b0ddd7d493836bbdf695cf71624b377391. It is...
CVE-2021-4313
Affected software: NethServer phonenehome. Vulnerability: SQL injection in the functions get_info/get_country_coor within file server/index.php. Root cause / details: manipulation leads to SQL injection; described across multiple sources for CVE-2021-4313 with critical severity. Impact (as stated...
ISC BIND DoS Vulnerability (CVE-2011-4313) - Windows
ISC BIND is prone to a denial of service DoS vulnerability. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...