CVE-2026-4420

creationtimestamp| type| source ---|---|--- 2026-04-07 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/04/CVE-2026-4420/...

EUVD-2026-4420

Dell Data Protection Advisor, versions prior to 19.12, contains an Improper Neutralization of Special Elements Used in a Template Engine vulnerability in the Server. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...

DLA-4420-1 postgresql-13 - security update

Bulletin has no description...

WordPress Vayu Blocks plugin <= 1.3.1 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via containerWidth Parameter vulnerability

Missing Authorization to Authenticated Subscriber+ Stored Cross-Site Scripting via containerWidth Parameter vulnerability discovered by Chuck in WordPress Plugin Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce versions = 1.3.1...

Linux Distros Unpatched Vulnerability : CVE-2013-4420

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple directory traversal vulnerabilities in the 1 tarextractglob and 2 tarextractall functions in libtar 1.2.20 and earlier allow remote attackers to...

Oracle Linux 8 : virt:ol / and / virt-devel:rhel (ELSA-2024-4420)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-4420 advisory. hivex libguestfs libguestfs-winsupport libiscsi libnbd libtpms libvirt libvirt-dbus libvirt-python nbdkit netcf perl-Sys-Virt qemu-kvm 6.2.0-50 -...

AlmaLinux 8 : virt:rhel and virt-devel:rhel (ALSA-2024:4420)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:4420 advisory. qemu-kvm: QEMU: 'qemu-img info' leads to host file read/write CVE-2024-4467 Tenable has extracted the preceding description block directly from the AlmaLinux...

CBL Mariner 2.0 Security Update: libtar (CVE-2013-4420)

The version of libtar installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2013-4420 advisory. - Multiple directory traversal vulnerabilities in the 1 tarextractglob and 2 tarextractall functions in libtar...

RHEL 7 : libtar (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libtar: missing validation of file names CVE-2013-4420 Note that Nessus has not tested for this issue but has inste...

RHEL 6 : libtar (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - libtar: missing validation of file names CVE-2013-4420 Note that Nessus has not tested for this issue but has inste...

CVE-2013-4420 affecting package libtar for versions less than 1.2.20-11

CVE-2013-4420 affecting package libtar for versions less than 1.2.20-11. A patched version of the package is available...

CVE-2023-4420

CVE-2023-4420 affects SICK LMS5xx devices. The vulnerability arises from the absence of Transport Layer Security, leaving the communication channel unencrypted and allowing a remote unprivileged attacker to eavesdrop and potentially manipulate data between LMS5xx and the client. Impacts include c...

CVE-2021-4420

creationtimestamp| type| source ---|---|--- 2023-07-12 12:41:38+00:00| seen| https://t.me/cibsecurity/66491...

CVE-2021-4420

The CVE-2021-4420 entry concerns the WordPress Sell Media plugin. Affected component: sell_media_process() in versions up to and including 2.5.5. Root cause: missing or incorrect nonce validation leading to Cross-Site Request Forgery. Impact: unauthenticated attackers can cause a forged request t...

SUSE CVE-2016-4420

The NFS dissector in Wireshark 2.x before 2.0.2 allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2013-4420 affecting package libtar for versions less than 1.2.20-8

CVE-2013-4420 affecting package libtar for versions less than 1.2.20-8. A patched version of the package is available...

Mageia: Security Advisory (MGASA-2014-0090)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libtar (EulerOS-SA-2021-2106)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Advisory ROSA-SA-2021-1894

Software: libtar 1.2.11 OS: Cobalt 7.9 CVE-ID: CVE-2013-4420 CVE-Crit: HIGH CVE-DESC: Multiple directory traversal vulnerabilities in the 1 tarextractglob and 2 tarextractall functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files with a . dot in a created tar...

EulerOS Virtualization for ARM 64 3.0.2.0 : libtar (EulerOS-SA-2021-2106)

According to the version of the libtar package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - Multiple directory traversal vulnerabilities in the 1 tarextractglob and 2 tarextractall functions in libtar 1.2.20 and...