IBM Maximo Asset Management Information Disclosure - XML External Entity Injection

IBM Maximo Asset Management is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. id: CVE-2020-4463 info: name: IBM Maximo Asset Management Information...

CVE-2016-4463

creationtimestamp| type| source ---|---|--- 2026-07-03 13:38:59+00:00| seen| https://gist.github.com/choco-bot/2dd08653d9d646e47e084eeac6121163 2026-07-25 14:07:38+00:00| seen| https://gist.github.com/choco-bot/2e588cee2993325d39d81c8e7e7c7803 2026-09-08 00:00:07+00:00| seen|...

CVE-2026-4463 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-4463 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2009-4463

creationtimestamp| type| source ---|---|--- 2026-06-19 18:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3monwolz6su2g...

CVE-2026-4463

creationtimestamp| type| source ---|---|--- 2026-03-20 07:35:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116260348555895971 2026-03-22 01:41:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhmg3wuqmu2c 2026-03-24 01:00:00+00:00| seen|...

DLA-4463-1 pyasn1 - security update

Bulletin has no description...

EUVD-2026-4463

GPT Academic runinsubprocesswrapperfunc Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GPT Academic. Authentication is not required to exploit this vulnerability. The specific...

MiracleLinux 7 : xerces-c-3.1.1-9.el7 (AXSA:2019-3675:01)

The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2019-3675:01 advisory. xerces-c: Stack overflow when parsing deeply nested DTD CVE-2016-4463 Tenable has extracted the preceding description block directly from the MiracleLinux...

CVE-2018-4463

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.2...

CVE-2021-4463

Longjing Technology BEMS API versions up to and including 1.21 contains an unauthenticated arbitrary file download vulnerability in the 'downloads' endpoint. The 'fileName' parameter is not properly sanitized, allowing attackers to craft traversal sequences and access sensitive files outside the...

CVE-2021-4463

creationtimestamp| type| source ---|---|--- 2025-11-12 22:40:24+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5hpthcpoxh2 2025-11-13 01:48:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5i2dygsf52s 2025-11-13 21:02:33+00:00| seen|...

CVE-2025-4463

creationtimestamp| type| source ---|---|--- 2025-05-09 05:24:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15673 2025-05-09 06:35:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lopquzkyar72 2025-05-09...

CVE-2025-4463

A vulnerability, which was classified as critical, was found in itsourcecode Gym Management System 1.0. Affected is an unknown function of the file /ajax.php?action=savepackage. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit h...

CVE-2025-4463 itsourcecode Gym Management System ajax.php sql injection

A vulnerability, which was classified as critical, was found in itsourcecode Gym Management System 1.0. Affected is an unknown function of the file /ajax.php?action=savepackage. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit h...

CVE-2025-4463

CVE-2025-4463 affects itsourcecode Gym Management System 1.0. The vulnerability resides in an unknown function of the file /ajax.php?action=save_package where manipulation of the ID parameter enables SQL injection. It is exploitable remotely and has been disclosed publicly. According to multiple ...

Linux Distros Unpatched Vulnerability : CVE-2016-4463

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in Apache Xerces-C++ before 3.1.4 allows context-dependent attackers to cause a denial of service via a deeply nested DTD...

CGA-XH9Q-4463-JVX3

Bulletin has no description...

RHEL 6 : xerces-c (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - xerces-c: Use-after-free in heap on specially crafted XML input CVE-2016-2099 - internal/XMLReader.cpp in...

CVE-2024-4463 Squelch Tabs and Accordions Shortcodes <= 0.4.7 - Cross-Site Request Forgery

The Squelch Tabs and Accordions Shortcodes plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.4.7. This is due to missing or incorrect nonce validation when saving plugin settings. This makes it possible for unauthenticated attackers to modify...