CVE-2025-4426

The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability. https://support.lenovo.com/us/en/productsecurity/home...

CVE-2025-4426

CVE-2025-4426 appears to be Lenovo-specific, involving a vulnerability in custom firmware where the SMM module’s SMRAM memory contents can be leaked, causing information disclosure. Public records in connected documents point to InsydeH2O-related SMRAM leakage in the SMM, with Lenovo as the vendo...

CVE-2024-4426 Comparison Slider <= 1.0.5 - Cross-Site Request Forgery

The Comparison Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.5. This is due to missing or incorrect nonce validation on several functions hooked to AJAX actions. This makes it possible for unauthenticated attackers to change slid...

WordPress Comparison Slider Plugin <= 1.0.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software Comparison Slider Type Plugin Vulnerable versions = 1.0.5 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-4426 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f4b5d98aca44 Credits Benedictus Jovan...

CVE-2023-4426

creationtimestamp| type| source ---|---|--- 2024-03-19 18:26:52+00:00| seen| https://t.me/ctinow/211804...

CVE-2023-4426

Rejected reason: REJECT Not a valid security issue - vendor unable to replicate...

CVE-2019-4426

creationtimestamp| type| source ---|---|--- 2024-03-12 09:11:25+00:00| seen| https://t.me/ctinow/205406...

Rocky Linux 8 : ncurses (RLSA-2021:4426)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:4426 advisory. - There is a heap-based buffer over-read in the ncfindentry function in tinfo/comphash.c in the terminfo library in ncurses before 6.1-20191012...

CVE-2021-4426

CVE-2021-4426 affects the Absolute Reviews plugin for WordPress (versions up to and including 1.0.8). The root cause is missing or incorrect nonce validation in the metabox_review_save() function, enabling Cross-Site Request Forgery. An unauthenticated attacker could trick a site administrator in...

CVE-2022-4426

creationtimestamp| type| source ---|---|--- 2023-01-10 02:28:19+00:00| seen| https://t.me/cibsecurity/56202...

CVE-2022-4426 Mautic Integration For WooCommerce < 1.0.3 - Arbitrary Options Update via CSRF

The Mautic Integration for WooCommerce WordPress plugin before 1.0.3 does not have proper CSRF check when updating settings, and does not ensure that the options to be updated belong to the plugin, allowing attackers to make a logged in admin change arbitrary blog options via a CSRF attack...

CVE-2022-4426

The CVE covers the Mautic Integration for WooCommerce WordPress plugin prior to version 1.0.3, where updates to settings lack proper CSRF checks and do not validate that updated options belong to the plugin. This enables a logged-in administrator to change arbitrary blog options via a CSRF attack...

CVE-2016-4426

creationtimestamp| type| source ---|---|--- 2022-07-28 20:12:57+00:00| seen| https://t.me/cibsecurity/47231...

CVE-2016-4426

In zulip before 1.3.12, bot API keys were accessible to other users in the same realm...

CVE-2016-4426

CVE-2016-4426 affects Zulip prior to 1.3.12, where bot API keys were accessible to other users in the same realm. Remediation: upgrade to Zulip 1.3.12 or later. NVD lists CVSS v3.1 base score 4.3 (Medium). No exploitation details are provided in the available documents.

AlmaLinux 8 : ncurses (ALSA-2021:4426)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:4426 advisory. - There is a heap-based buffer over-read in the ncfindentry function in tinfo/comphash.c in the terminfo library in ncurses before 6.1-20191012...

Oracle Linux 8 : ncurses (ELSA-2021-4426)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4426 advisory. - fix buffer overflow in terminfo entry hashtable CVE-2019-17594 Tenable has extracted the preceding description block directly from the Oracle Linux...

Security Bulletin: A cross site scripting security vulnerability has been identified with Case Builder component shipped with IBM Business Automation Workflow (CVE-2019-4426)

Summary Case Builder component shipped with IBM Business Automation Workflow is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

CVE-2019-4426

CVE-2019-4426 is a cross-site scripting vulnerability in the Case Builder component of IBM Case Manager (versions 5.1.1–5.3) and IBM Business Automation Workflow (18.0.0.0–19.0.0.2). The root cause is inadequate sanitization of user input in the Web UI, allowing arbitrary JavaScript execution and...

Debian DSA-4426-1 : tryton-server - security update

Cedric Krier discovered that missing access validation in Tryton could result in information disclosure . C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4426. The text itself is copyright C Software in the...