66 matches found
MINI-J5QX-4364-QGWM
Bulletin has no description...
CVE-2026-4364 Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 allows certificate listings retrieved via a browser session to return a...
FLIR Systems AX8 Cameras Command Injection (CVE-2022-4364)
A vulnerability has been found in Teledyne FLIR AX8 up to 1.46.16. Affected by this issue is some unknown functionality of the file palette.php of the component Web Service Handler. The manipulation of the argument palette leads to command injection. The attack is possible to be carried out...
EUVD-2026-4364
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Israpil Textmetrics webtexttool allows Code Injection.This issue affects Textmetrics: from n/a through = 3.6.3...
ECHO-C2CD-4364-539C
Bulletin has no description...
DLA-4364-1 bind9 - security update
Bulletin has no description...
CVE-2024-4364
The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's button widgets in all versions up to, and including, 1.7.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...
CVE-2025-4364
The affected products could allow an unauthenticated attacker to access system information that could enable further access to sensitive files and obtain administrative credentials...
CVE-2025-4364 Exposure of Sensitive System Information to an Unauthorized Control Sphere
The affected products could allow an unauthenticated attacker to access system information that could enable further access to sensitive files and obtain administrative credentials...
CVE-2025-4364 Exposure of Sensitive System Information to an Unauthorized Control Sphere
The affected products could allow an unauthenticated attacker to access system information that could enable further access to sensitive files and obtain administrative credentials...
CVE-2025-4364
creationtimestamp| type| source ---|---|--- 2025-05-20 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-11...
CVE-2024-4364
CVE-2024-4364 affects Qi Addons For Elementor for WordPress. The vulnerability is Stored Cross-Site Scripting in the plugin’s button widgets due to insufficient input sanitization and output escaping on user-supplied attributes, enabling an authenticated attacker with contributor-level access or ...
WordPress Qi Addons For Elementor Plugin <= 1.7.2 is vulnerable to Cross Site Scripting (XSS)
Software Qi Addons For Elementor Type Plugin Vulnerable versions = 1.7.2 Fixed in 1.7.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4364 Patch priority Low CVSS severity Low 6.5 Developer Qode Interactive PSID 0676734b6c2d Credits wesley wcraft...
openSUSE: Security Advisory for chromium (openSUSE-SU-2023:0234-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
KLA61310 Multiple vulnerabilities in Opera
Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Audio can be exploited to cause denial of servi...
Chromium: CVE-2023-4364 Inappropriate implementation in Permission Prompts
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Debian: Security Advisory (DSA-5479-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2023-4364
Inappropriate implementation in Permission Prompts in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page. Chromium security severity: Medium...