135 matches found
CVE-2026-4461
creationtimestamp| type| source ---|---|--- 2026-03-22 01:01:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhmduaeqde2s 2026-03-24 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260324...
SUSE CVE-2026-4461
Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2026-4461
This CVE affects Google Chrome’s V8 engine, with an inappropriate implementation in versions before 146.0.7680.153 allowing remote heap corruption via a crafted HTML page. Impact is noted as High; remediation is to upgrade to 146.0.7680.153 or later. If exploitation details are not provided in th...
Linux Distros Unpatched Vulnerability : CVE-2026-4461
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML...
DLA-4461-1 python-tornado - security update
Bulletin has no description...
EUVD-2026-4461
GPT Academic streamdaas Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GPT Academic. Interaction with a malicious DAAS server is required to exploit this vulnerability but...
CVE-2018-4461
A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2...
CVE-2021-4461
creationtimestamp| type| source ---|---|--- 2025-10-30 21:52:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4gx3w6gi42b 2025-11-04 21:02:32+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m4tgnbv2dp26...
CVE-2021-4461 Seeyon Zhiyuan OA Web Application System < 7.0 SP1 Authentication Bypass
Seeyon Zhiyuan OA Web Application System versions up to and including 7.0 SP1 improperly decode and parse the enc parameter in thirdpartyController.do. The decoded map values can influence session attributes without sufficient authentication/authorization checks, enabling attackers to assign a...
VulnCheck KEV: CVE-2021-4461
Seeyon Zhiyuan OA Web Application System versions up to and including 7.0 SP1 improperly decode and parse the enc parameter in thirdpartyController.do. The decoded map values can influence session attributes without sufficient authentication/authorization checks, enabling attackers to assign a...
ECHO-4461-1A57-8C26
Bulletin has no description...
CVE-2006-4461
Paessler IPCheck Server Monitor before 5.3.3.639/640 does not properly implement a "list of acceptable host IP addresses in the probe settings," which has unknown impact and attack vectors...
CVE-2025-4461
A vulnerability classified as problematic was found in TOTOLINK N150RT 3.4.0-B20190525. This vulnerability affects unknown code of the component Virtual Server Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public...
CVE-2025-4461 TOTOLINK N150RT Virtual Server Page cross site scripting
A vulnerability classified as problematic was found in TOTOLINK N150RT 3.4.0-B20190525. This vulnerability affects unknown code of the component Virtual Server Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public...
CVE-2025-4461
CVE-2025-4461 affects TOTOLINK N150RT (version 3.4.0-B20190525) via the Virtual Server Page component. Multiple connected sources confirm a cross-site scripting vulnerability caused by insufficient input filtering/escaping, enabling remote exploitation. The exploit has been disclosed publicly. PT...
CVE-2025-4461 TOTOLINK N150RT Virtual Server Page cross site scripting
A vulnerability classified as problematic was found in TOTOLINK N150RT 3.4.0-B20190525. This vulnerability affects unknown code of the component Virtual Server Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public...
Linux Distros Unpatched Vulnerability : CVE-2011-4461
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote...
RHEL 6 : jetty-eclipse (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - jetty: hash table collisions CPU usage DoS oCERT-2011-003 CVE-2011-4461 Note that Nessus has not tested for this...
CVE-2019-4461
creationtimestamp| type| source ---|---|--- 2024-01-29 08:41:18+00:00| seen| https://t.me/ctinow/175107...
CentOS 7 : firefox (RHSA-2023:4461)
The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:4461 advisory. - Offscreen Canvas did not properly track cross-origin tainting, which could have been used to access image data from another site in violation of...