91 matches found
CVE-2026-4459 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-4459
creationtimestamp| type| source ---|---|--- 2026-03-22 01:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhmdtse5p72f 2026-03-29 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0375/...
Chromium: CVE-2026-4459 Out of bounds read and write in WebAudio
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2026-4459
Out of bounds read and write in WebAudio in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
Linux Distros Unpatched Vulnerability : CVE-2026-4459
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read and write in WebAudio in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted...
MINI-6M2Q-38JF-4459
Bulletin has no description...
Linux Distros Unpatched Vulnerability : CVE-2014-4459
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free vulnerability in WebKit, as used in Apple OS X before 10.10.1, allows remote attackers to execute arbitrary code via crafted page objects in an...
CVE-2021-4459
CVE-2021-4459 is a directory traversal vulnerability in SMA Sunny Boy inverters. The issue allows an authenticated remote attacker to access files/directories outside the web root, potentially exposing sensitive system information on affected Sunny Boy devices. The CVE is described with the title...
RockyLinux 8 : nodejs:22 (RLSA-2025:4459)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:4459 advisory. c-ares: c-ares has a use-after-free in readanswers CVE-2025-31498 SQLite: integer overflow in SQLite CVE-2025-3277 Tenable has extracted the preceding...
CVE-2022-4459
The WP Show Posts WordPress plugin before 1.1.4 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privileg...
CVE-2025-4459 code-projects Patient Record Management System fecalysis_form.php sql injection
A vulnerability was found in code-projects Patient Record Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file fecalysisform.php. The manipulation of the argument itrno leads to sql injection. The attack may be launched remotely. T...
CVE-2025-4459 code-projects Patient Record Management System fecalysis_form.php sql injection
A vulnerability was found in code-projects Patient Record Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file fecalysisform.php. The manipulation of the argument itrno leads to sql injection. The attack may be launched remotely. T...
Linux Distros Unpatched Vulnerability : CVE-2023-4459
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference flaw was found in vmxnet3rqcleanup in drivers/net/vmxnet3/vmxnet3drv.c in the networking sub-component in vmxnet3 in the Linux Kernel...
Linux Distros Unpatched Vulnerability : CVE-2012-4459
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial of service cras...
CVE-2021-4459
creationtimestamp| type| source ---|---|--- 2025-02-06 03:13:45+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:41+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-08-27 08:07:01+00:00| seen| https://infosec.exchange/users/certvde/statuses/115099698555374241...
Cisco IP Phone Session Initiation Protocol Denial of Service (CVE-2007-4459)
Cisco IP Phone 7940 and 7960 with P0S3-08-6-00 firmware, and other SIP firmware before 8.70, allows remote attackers to cause a denial of service device reboot via 1 a certain sequence of 10 invalid SIP INVITE and OPTIONS messages; or 2 a certain invalid SIP INVITE message that contains a remote...
CVE-2024-4459
CVE-2024-4459 affects Themesflat Addons For Elementor for WordPress. The vulnerability is Stored Cross-Site Scripting via widget titles, present in all versions up to 2.1.1 according to the initial description, with supporting detail in Patchstack that versions
CVE-2024-4459 Themesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Titles
The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widget's titles in all versions up to, and including, 2.1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
RHEL 8 : kernel (RHSA-2024:2006)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2006 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: use-after-free in...
Important: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security...