61 matches found
CVE-2023-4426
creationtimestamp| type| source ---|---|--- 2024-03-19 18:26:52+00:00| seen| https://t.me/ctinow/211804...
CVE-2023-4426
Rejected reason: REJECT Not a valid security issue - vendor unable to replicate...
CVE-2019-4426
creationtimestamp| type| source ---|---|--- 2024-03-12 09:11:25+00:00| seen| https://t.me/ctinow/205406...
Rocky Linux 8 : ncurses (RLSA-2021:4426)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:4426 advisory. - There is a heap-based buffer over-read in the ncfindentry function in tinfo/comphash.c in the terminfo library in ncurses before 6.1-20191012...
CVE-2021-4426
CVE-2021-4426 affects the Absolute Reviews plugin for WordPress (versions up to and including 1.0.8). The root cause is missing or incorrect nonce validation in the metabox_review_save() function, enabling Cross-Site Request Forgery. An unauthenticated attacker could trick a site administrator in...
CVE-2022-4426
creationtimestamp| type| source ---|---|--- 2023-01-10 02:28:19+00:00| seen| https://t.me/cibsecurity/56202...
CVE-2022-4426 Mautic Integration For WooCommerce < 1.0.3 - Arbitrary Options Update via CSRF
The Mautic Integration for WooCommerce WordPress plugin before 1.0.3 does not have proper CSRF check when updating settings, and does not ensure that the options to be updated belong to the plugin, allowing attackers to make a logged in admin change arbitrary blog options via a CSRF attack...
CVE-2022-4426
The CVE covers the Mautic Integration for WooCommerce WordPress plugin prior to version 1.0.3, where updates to settings lack proper CSRF checks and do not validate that updated options belong to the plugin. This enables a logged-in administrator to change arbitrary blog options via a CSRF attack...
CVE-2016-4426
creationtimestamp| type| source ---|---|--- 2022-07-28 20:12:57+00:00| seen| https://t.me/cibsecurity/47231...
CVE-2016-4426
In zulip before 1.3.12, bot API keys were accessible to other users in the same realm...
CVE-2016-4426
CVE-2016-4426 affects Zulip prior to 1.3.12, where bot API keys were accessible to other users in the same realm. Remediation: upgrade to Zulip 1.3.12 or later. NVD lists CVSS v3.1 base score 4.3 (Medium). No exploitation details are provided in the available documents.
AlmaLinux 8 : ncurses (ALSA-2021:4426)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:4426 advisory. - There is a heap-based buffer over-read in the ncfindentry function in tinfo/comphash.c in the terminfo library in ncurses before 6.1-20191012...
Oracle Linux 8 : ncurses (ELSA-2021-4426)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-4426 advisory. - fix buffer overflow in terminfo entry hashtable CVE-2019-17594 Tenable has extracted the preceding description block directly from the Oracle Linux...
Security Bulletin: A cross site scripting security vulnerability has been identified with Case Builder component shipped with IBM Business Automation Workflow (CVE-2019-4426)
Summary Case Builder component shipped with IBM Business Automation Workflow is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...
CVE-2019-4426
CVE-2019-4426 is a cross-site scripting vulnerability in the Case Builder component of IBM Case Manager (versions 5.1.1–5.3) and IBM Business Automation Workflow (18.0.0.0–19.0.0.2). The root cause is inadequate sanitization of user input in the Web UI, allowing arbitrary JavaScript execution and...
Debian DSA-4426-1 : tryton-server - security update
Cedric Krier discovered that missing access validation in Tryton could result in information disclosure . C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4426. The text itself is copyright C Software in the...
CVE-2018-4426
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5...
CVE-2018-4426
CVE-2018-4426 is an Apple memory corruption vulnerability affecting pre-12.x macOS Mojave, iOS 12, tvOS 12 and watchOS 5, addressed by Apple in subsequent security updates. The description states the issue was mitigated by improved memory handling. Public documentation in connected items confirms...