Lucene search
K

110 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 3:15 p.m.2 views

CVE-2026-4469

A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/admineditmenuaction.php. Such manipulation of the argument productname leads to sql injection. The attack may be performed from...

9.8CVSS5.8AI score0.00041EPSS
Exploits1References1
Circl
Circl
added 2026/03/20 6:43 a.m.0 views

CVE-2026-4469

creationtimestamp| type| source ---|---|--- 2026-03-20 06:43:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhhw3bto3w2o...

9.8CVSS5.8AI score0.00041EPSS
Exploits1References1
EUVD
EUVD
added 2026/01/23 2:58 a.m.3 views

EUVD-2026-4469

ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is required to exploit this vulnerability. The specific fla...

7.2CVSS6.5AI score0.00383EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.3 views

MiracleLinux 7 : firefox-68.5.0-2.0.1.el7.AXS7 (AXSA:2020-4469:04)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2020-4469:04 advisory. Mozilla: Missing bounds check on shared memory read in the parent process CVE-2020-6796 Mozilla: Memory safety bugs fixed in Firefox 73 and Firefox...

8.8CVSS8.4AI score0.01279EPSS
Exploits0References4
OSV
OSV
added 2025/11/03 7:38 p.m.2 views

MINI-4469-CJM8-3P86

Bulletin has no description...

7.5CVSS7AI score0.00044EPSS
Exploits0
Circl
Circl
added 2025/05/09 7:25 a.m.13 views

CVE-2025-4469

creationtimestamp| type| source ---|---|--- 2025-05-09 07:25:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15683 2025-05-09 09:21:38+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lopwpkkc7iu2 2025-05-09...

5.4CVSS3.9AI score0.00152EPSS
Exploits1References3
NVD
NVD
added 2025/05/09 7:16 a.m.13 views

CVE-2025-4469

A vulnerability classified as problematic has been found in SourceCodester Online Student Clearance System 1.0. Affected is an unknown function of the file /admin/add-admin.php. The manipulation of the argument txtusername/txtfullname/txtpassword/txtpassword2 leads to cross site scripting. It is...

5.4CVSS0.00152EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/05/09 7:0 a.m.11 views

CVE-2025-4469 SourceCodester Online Student Clearance System add-admin.php cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Online Student Clearance System 1.0. Affected is an unknown function of the file /admin/add-admin.php. The manipulation of the argument txtusername/txtfullname/txtpassword/txtpassword2 leads to cross site scripting. It is...

4.8CVSS0.00152EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/05/09 7:0 a.m.9 views

CVE-2025-4469 SourceCodester Online Student Clearance System add-admin.php cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Online Student Clearance System 1.0. Affected is an unknown function of the file /admin/add-admin.php. The manipulation of the argument txtusername/txtfullname/txtpassword/txtpassword2 leads to cross site scripting. It is...

4.8CVSS4.3AI score0.00152EPSS
Exploits1References5
CVE
CVE
added 2025/05/09 7:0 a.m.51 views

CVE-2025-4469

SourceCodester Online Student Clearance System 1.0 is affected by CVE-2025-4469 in the /admin/add-admin.php file. The vulnerability arises from manipulation of parameters txtusername, txtfullname, txtpassword, and txtpassword2, enabling cross-site scripting and allowing remote exploitation. Multi...

5.4CVSS4AI score0.00152EPSS
Exploits1References5Affected Software1
Circl
Circl
added 2025/04/24 7:6 p.m.0 views

RHSA-2024:4469

creationtimestamp| type| source ---|---|--- 2025-04-24 19:06:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13317...

4.8AI score
Exploits0References1
NVD
NVD
added 2024/05/31 6:15 a.m.10 views

CVE-2024-4469

The WP STAGING WordPress Backup Plugin WordPress plugin before 3.5.0 does not prevent users with the administrator role from pinging conducting SSRF attacks, which may be a problem in multisite configurations...

7.5CVSS9.4AI score0.00687EPSS
Exploits2References1
Cvelist
Cvelist
added 2024/05/31 6:0 a.m.15 views

CVE-2024-4469 Migration Backup Restore < 3.5.0 - Admin+ SSRF

The WP STAGING WordPress Backup Plugin WordPress plugin before 3.5.0 does not prevent users with the administrator role from pinging conducting SSRF attacks, which may be a problem in multisite configurations...

9.4AI score0.00687EPSS
Exploits2References1
CVE
CVE
added 2024/05/31 6:0 a.m.3210 views

CVE-2024-4469

CVE-2024-4469 affects the WP STAGING WordPress Backup Plugin (pre-3.5.0). An administrator can trigger server-side request forgery (SSRF) which may impact multisite setups. The issue is mitigated/solved by upgrading to version 3.5.0 or later (patch).

7.5CVSS6.5AI score0.00687EPSS
Exploits2References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/05/31 6:0 a.m.10 views

CVE-2024-4469 Migration Backup Restore < 3.5.0 - Admin+ SSRF

The WP STAGING WordPress Backup Plugin WordPress plugin before 3.5.0 does not prevent users with the administrator role from pinging conducting SSRF attacks, which may be a problem in multisite configurations...

6.6AI score0.00687EPSS
Exploits2References1
Patchstack
Patchstack
added 2024/05/31 12:0 a.m.12 views

WordPress WP STAGING – Backup Duplicator & Migration Plugin < 3.5.0 is vulnerable to Server Side Request Forgery (SSRF)

Software WP STAGING – Backup Duplicator & Migration Type Plugin Vulnerable versions 3.5.0 Fixed in 3.5.0 OWASP Top 10 A1: Broken Access Control Classification Server Side Request Forgery SSRF CVE CVE-2024-4469 Patch priority Low CVSS severity Low 5.5 Developer Claim ownership PSID 76283163b094...

6.6AI score0.00687EPSS
Exploits2References4Affected Software1
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.45 views

openSUSE: Security Advisory for go1.21 (SUSE-SU-2023:4469-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.6AI score0.944EPSS
Exploits19References4
Tenable Nessus
Tenable Nessus
added 2023/11/07 12:0 a.m.16 views

Rocky Linux 8 : cups (RLSA-2020:4469)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2020:4469 advisory. - A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. An application may be able to gain elevated...

7.8CVSS6.8AI score0.00162EPSS
Exploits0References9
Circl
Circl
added 2023/10/06 2:18 p.m.1 views

CVE-2023-4469

creationtimestamp| type| source ---|---|--- 2023-10-06 14:18:27+00:00| seen| https://t.me/cibsecurity/71702...

5.3CVSS6.6AI score0.0044EPSS
Exploits0References1
OSV
OSV
added 2023/10/06 10:15 a.m.1 views

CVE-2023-4469

The Profile Extra Fields by BestWebSoft plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the prflxtrfldsexportfile function in versions up to, and including, 1.2.7. This makes it possible for unauthenticated attackers to expose potentially...

5.3CVSS7.3AI score0.0044EPSS
Exploits0References2
Rows per page
Query Builder