Lucene search
+L

47 matches found

Circl
Circl
added 2026/04/07 3:16 p.m.6 views

CVE-2026-4401

creationtimestamp| type| source ---|---|--- 2026-04-07 15:16:05+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4401 2026-04-08 00:08:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwytkwmbm2z 2026-04-20 15:37:06+00:00| seen|...

5.4CVSS5.8AI score0.00161EPSS
Exploits0References3
EUVD
EUVD
added 2026/01/23 2:28 p.m.4 views

EUVD-2026-4401

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Select-Themes Prowess prowess allows PHP Local File Inclusion.This issue affects Prowess: from n/a through = 2.3...

5.5AI score0.00488EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/14 2:15 p.m.16 views

CVE-2025-11669

Zohocorp ManageEngine PAM360 versions before 8202; Password Manager Pro versions before 13221; Access Manager Plus versions prior to 4401 are vulnerable to an authorization issue in the initiate remote session functionality...

8.1CVSS7AI score0.00723EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/13 12:0 a.m.33 views

ZOHO多款产品 安全漏洞

ZOHO Password Manager Pro PMP and so on are products of ZOHO USA company.ZOHO Password Manager Pro is a password manager.ZOHO ManageEngine Access Manager Plus is the ZOHO ManageEngine PAM360 is a complete PAM software. A security vulnerability exists in several ZOHO products, which stems from an...

8.1CVSS5.8AI score0.00723EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:46 a.m.7 views

CVE-2022-4401

A vulnerability was found in pallidlight online-course-selection-system. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-215268...

5.4CVSS6.3AI score0.00356EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/06 4:22 a.m.12 views

CVE-2021-4401

The Style Kits plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.0. This is due to missing or incorrect nonce validation on the updatepostsstylekit function. This makes it possible for unauthenticated attackers to update style kits for posts vi...

8.8CVSS6.4AI score0.00536EPSS
Exploits0References1
Circl
Circl
added 2024/08/30 7:17 a.m.5 views

CVE-2024-4401

creationtimestamp| type| source ---|---|--- 2024-08-30 07:17:30+00:00| seen| https://t.me/cvedetector/4498...

6.4CVSS4.8AI score0.0031EPSS
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/01/24 8:23 p.m.4 views

Malicious code in wlwz-2312-4401 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0652eb89bafe14a2379812121834e7161929526dfdc0fb486ce155866306b20a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
Circl
Circl
added 2023/10/05 10:12 p.m.6 views

CVE-2023-4401

creationtimestamp| type| source ---|---|--- 2023-10-05 22:12:53+00:00| seen| https://t.me/cibsecurity/71669...

8.8CVSS8.1AI score0.00683EPSS
Exploits0References1
NVD
NVD
added 2023/10/05 6:15 p.m.16 views

CVE-2023-4401

Dell SmartFabric Storage Software v1.4 and earlier contains an OS Command Injection Vulnerability in the CLI use of the ‘more’ command. A local or remote authenticated attacker could potentially exploit this vulnerability, leading to the ability to gain root-level access...

8.8CVSS8AI score0.00683EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/10/05 5:12 p.m.18 views

CVE-2023-4401

Dell SmartFabric Storage Software v1.4 and earlier contains an OS Command Injection Vulnerability in the CLI use of the ‘more’ command. A local or remote authenticated attacker could potentially exploit this vulnerability, leading to the ability to gain root-level access...

7.8CVSS8.8AI score0.00683EPSS
Exploits0References1
CVE
CVE
added 2023/07/01 5:33 a.m.40 views

CVE-2021-4401

The CVE pertains to the WordPress Style Kits plugin, affected versions up to and including 1.8.0. The root cause is missing or incorrect nonce validation in the update_posts_stylekit() function, enabling Cross‑Site Request Forgery (CSRF). This allows unauthenticated attackers to update style kits...

8.8CVSS8.2AI score0.00536EPSS
Exploits0References9Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/01 5:33 a.m.9 views

CVE-2021-4401 Style Kits <= 1.8.0 - Cross-Site Request Forgery Bypass

The Style Kits plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.8.0. This is due to missing or incorrect nonce validation on the updatepostsstylekit function. This makes it possible for unauthenticated attackers to update style kits for posts vi...

8.8CVSS7.2AI score0.00536EPSS
Exploits0References9
Circl
Circl
added 2022/12/11 12:19 p.m.6 views

CVE-2022-4401

creationtimestamp| type| source ---|---|--- 2022-12-11 12:19:56+00:00| seen| https://t.me/cibsecurity/54261...

5.4CVSS5.5AI score0.00356EPSS
Exploits1References1
Ubuntu
Ubuntu
added 2020/06/24 4:22 p.m.72 views

USN-4403-1: Mutt vulnerability and regression

It was discovered that Mutt incorrectly handled certain requests. An attacker could possibly use this issue to enable MITM attacks. CVE-2020-14954 This update also address a regression caused in the last update USN-4401-1. It only affected Ubuntu 12.04 ESM, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and...

5.9CVSS6.6AI score0.02288EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2020/06/23 12:0 a.m.33 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Mutt vulnerabilities (USN-4401-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4401-1 advisory. It was discovered that Mutt incorrectly handled certain requests. An attacker could possibly use this issue to enable MITM attack...

5.9CVSS6.4AI score0.0214EPSS
Exploits0References3
CVE
CVE
added 2019/11/06 2:32 p.m.46 views

CVE-2016-4401

Aruba ClearPass Policy Manager is affected by CVE-2016-4401. Affected versions are before 6.5.7 and 6.6.x before 6.6.2. The vulnerability allows attackers to obtain database credentials. No explicit root-cause, exploit details, or remediation steps are provided in the connected documents beyond t...

10CVSS9.2AI score0.01387EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2019/04/03 6:29 p.m.11 views

CVE-2018-4401

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5...

9.3CVSS7.6AI score0.01061EPSS
Exploits0References5
CVE
CVE
added 2019/04/03 5:43 p.m.92 views

CVE-2018-4401

CVE-2018-4401 is an Apple-family memory corruption vulnerability addressed by Apple in 2018 security updates. Affected products/versions include iOS prior to 12, macOS Mojave 10.14, tvOS 12, and watchOS 5. The issue was mitigated by Apple through memory-management fixes in the corresponding secur...

9.3CVSS7.4AI score0.01061EPSS
Exploits0References5Affected Software4
Tenable Nessus
Tenable Nessus
added 2019/03/04 12:0 a.m.54 views

Debian DSA-4401-1 : wordpress - security update

Several vulnerabilities were discovered in Wordpress, a web blogging tool. They allowed remote attackers to perform various Cross-Side Scripting XSS and PHP injections attacks, delete files, leak potentially sensitive data, create posts of unauthorized types, or cause denial-of-service by...

9.8CVSS6.8AI score0.82736EPSS
Exploits8References12
Rows per page
Query Builder