Lucene search
+L

138 matches found

Wolfi
Wolfi
•added 2026/07/01 2:16 p.m.•24 views

CVE-2026-4461 vulnerabilities

Vulnerabilities for packages: chromium...

8.8CVSS7.7AI score0.00379EPSS
SaveExploits0
Circl
Circl
•added 2026/03/22 1:01 a.m.•18 views

CVE-2026-4461

creationtimestamp| type| source ---|---|--- 2026-03-22 01:01:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhmduaeqde2s 2026-03-24 01:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260324...

8.8CVSS7.7AI score0.00379EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/03/22 12:25 a.m.•17 views

SUSE CVE-2026-4461

Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.3AI score0.00379EPSS
SaveExploits0References3
CVE
CVE
•added 2026/03/20 1:34 a.m.•75 views

CVE-2026-4461

Google Chrome's V8 engine contains an inappropriate implementation that allows a remote attacker to trigger heap corruption via a crafted HTML page. This vulnerability exists in versions prior to 146.0.7680.153 . Impacting the Chromium project, this flaw could lead to arbitrary code execution, de...

8.8CVSS8.3AI score0.00379EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/03/20 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-4461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML...

8.8CVSS8.1AI score0.00379EPSS
SaveExploits0References2
OSV
OSV
•added 2026/02/01 12:00 a.m.•10 views

DLA-4461-1 python-tornado - security update

Bulletin has no description...

7.5CVSS6.7AI score0.00559EPSS
SaveExploits0
EUVD
EUVD
•added 2026/01/23 3:28 a.m.•17 views

EUVD-2026-4461

GPT Academic streamdaas Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GPT Academic. Interaction with a malicious DAAS server is required to exploit this vulnerability but...

8.1CVSS6.6AI score0.00761EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/01/09 11:55 a.m.•18 views

CVE-2018-4461

A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2...

9.3CVSS7.5AI score0.01052EPSS
SaveExploits0References1
Circl
Circl
•added 2025/10/30 9:52 p.m.•20 views

CVE-2021-4461

creationtimestamp| type| source ---|---|--- 2025-10-30 21:52:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4gx3w6gi42b 2025-11-04 21:02:32+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m4tgnbv2dp26 2026-06-19 12:45:22+00:00| exploited|...

9.3CVSS5.8AI score0.0049EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/10/30 9:16 p.m.•34 views

CVE-2021-4461 Seeyon Zhiyuan OA Web Application System < 7.0 SP1 Authentication Bypass

Seeyon Zhiyuan OA Web Application System versions up to and including 7.0 SP1 improperly decode and parse the enc parameter in thirdpartyController.do. The decoded map values can influence session attributes without sufficient authentication/authorization checks, enabling attackers to assign a...

9.3CVSS0.0049EPSS
SaveExploits0References4
VulnCheck KEV
VulnCheck KEV
•added 2025/10/30 12:00 a.m.•25 views

VulnCheck KEV: CVE-2021-4461

Seeyon Zhiyuan OA Web Application System versions up to and including 7.0 SP1 improperly decode and parse the enc parameter in thirdpartyController.do. The decoded map values can influence session attributes without sufficient authentication/authorization checks, enabling attackers to assign a...

9.3CVSS5.8AI score0.0049EPSS
SaveIn wildExploits0References18
OSV
OSV
•added 2025/09/15 1:11 a.m.•4 views

ECHO-4461-1A57-8C26 Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.

Bulletin has no description...

5.7CVSS6.7AI score0.01278EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/21 8:57 p.m.•22 views

CVE-2006-4461

Paessler IPCheck Server Monitor before 5.3.3.639/640 does not properly implement a "list of acceptable host IP addresses in the probe settings," which has unknown impact and attack vectors...

10CVSS7AI score0.01426EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/11 5:06 a.m.•42 views

CVE-2025-4461

A vulnerability classified as problematic was found in TOTOLINK N150RT 3.4.0-B20190525. This vulnerability affects unknown code of the component Virtual Server Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public...

5.4CVSS6.7AI score0.00647EPSS
SaveExploits1References1
CVE
CVE
•added 2025/05/09 4:31 a.m.•79 views

CVE-2025-4461

CVE-2025-4461 affects TOTOLINK N150RT (version 3.4.0-B20190525) via the Virtual Server Page component. Multiple connected sources confirm a cross-site scripting vulnerability caused by insufficient input filtering/escaping, enabling remote exploitation. The exploit has been disclosed publicly. PT...

5.4CVSS3.7AI score0.00647EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/05/09 4:31 a.m.•12 views

CVE-2025-4461 TOTOLINK N150RT Virtual Server Page cross site scripting

A vulnerability classified as problematic was found in TOTOLINK N150RT 3.4.0-B20190525. This vulnerability affects unknown code of the component Virtual Server Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public...

4.8CVSS3.7AI score0.00647EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/05/09 4:31 a.m.•45 views

CVE-2025-4461 TOTOLINK N150RT Virtual Server Page cross site scripting

A vulnerability classified as problematic was found in TOTOLINK N150RT 3.4.0-B20190525. This vulnerability affects unknown code of the component Virtual Server Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public...

4.8CVSS0.00647EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
•added 2025/03/03 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2011-4461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote...

5.3CVSS6.1AI score0.04922EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2024/06/03 12:00 a.m.•43 views

RHEL 6 : jetty-eclipse (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - jetty: hash table collisions CPU usage DoS oCERT-2011-003 CVE-2011-4461 Note that Nessus has not tested for this...

5.3CVSS7.3AI score0.04922EPSS
SaveExploits1References1
Circl
Circl
•added 2024/01/29 8:41 a.m.•16 views

CVE-2019-4461

creationtimestamp| type| source ---|---|--- 2024-01-29 08:41:18+00:00| seen| https://t.me/ctinow/175107...

5.4CVSS5.4AI score0.00561EPSS
SaveExploits0References1
Rows per page
Query Builder