GO-2026-4473 vulnerabilities

Vulnerabilities for packages: scorecard, grype-fips, melange, gomplate-fips, k9s, cloudbeat-fips, rancher-fleet, zot, flux-kustomize-controller, argo-cd, witness, flux-source-controller-fips, flux-source-controller, cloudbeat, argo-events, crossplane-fips, flux-image-automation-controller,...

ECHO-D76D-8B79-4473 Kernel vulnerabilities are irrelevant in container environments.

Bulletin has no description...

CVE-2021-4473

creationtimestamp| type| source ---|---|--- 2026-04-07 15:58:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miw5gorvxq22 2026-04-08 21:03:01+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3miz6wtjcpe2p 2026-04-26 22:07:07+00:00| seen|...

Debian: Security Advisory (DLA-4473-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-4473-1 zabbix - security update

Bulletin has no description...

MINI-4473-P46X-M2R3

Bulletin has no description...

CVE-2025-4473

creationtimestamp| type| source ---|---|--- 2025-05-13 07:30:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16085 2025-05-13 08:47:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp23xr4pv42w 2025-05-13 11:21:37+00:00| seen| https://t.me/cvedetector/25171...

CVE-2025-4473

CVE-2025-4473 concerns the WordPress Frontend Dashboard plugin (versions 1.0–2.2.7). The issue is a missing capability check in the ajax_request() function, enabling authenticated users with Subscriber-level access or higher to redirect outgoing emails (e.g., SMTP) to an attacker-controlled serve...

CVE-2025-4473 Frontend Dashboard 1.5.10 - 2.2.7 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via ajax_request Function

The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ajaxrequest function in versions 1.0 to 2.2.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to control where the plugin sends...

CVE-2025-4473 Frontend Dashboard 1.5.10 - 2.2.7 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via ajax_request Function

The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ajaxrequest function in versions 1.0 to 2.2.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to control where the plugin sends...

CVE-2024-4473

creationtimestamp| type| source ---|---|--- 2025-02-20 23:26:57+00:00| seen| Telegram/arIwGWSaollaWiZIL0v73zisBYaoXpiMwnegH5sp-zDUyIYU...

MSC-2024-4473

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Malicious obfuscated code – the code is...

CVE-2024-4473

The Sydney Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the "aThemes: Portfolio" widget in all versions up to, and including, 1.31 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

openSUSE: Security Advisory for frr (SUSE-SU-2023:4473-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-4473

creationtimestamp| type| source ---|---|--- 2023-12-01 13:01:05+00:00| seen| https://t.me/truesecator/5152 2023-12-01 17:29:09+00:00| seen| https://t.me/itsecnews/3752 2023-12-06 16:44:37+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/8091 2023-12-06 22:13:25+00:00| seen|...

Zyxel Releases Patches to Fix 15 Flaws in NAS, Firewall, and AP Devices

Zyxel has released patches to address 15 security issues impacting network-attached storage NAS, firewall, and access point AP devices, including three critical flaws that could lead to authentication bypass and command injection. The three vulnerabilities are listed below - CVE-2023-35138 CVSS...

CVE-2023-4473

A command injection vulnerability exists in the web server of Zyxel NAS326 (firmware version V5.21(AAZF.14)C0 ) and NAS542 (firmware version V5.21(ABAG.11)C0 ) and earlier versions. The root cause is the lack of measures to neutralize special elements used in operating system commands. This allow...

SUSE SLES15 / openSUSE 15 Security Update : frr (SUSE-SU-2023:4473-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4473-1 advisory. - An issue was discovered in FRRouting FRR through 9.0.1. It mishandles malformed MPREACHNLRI data, leading to a crash. CVE-2023-46752 - An issue was...

Ubuntu 18.04 LTS : libmysofa vulnerabilities (USN-4473-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4473-1 advisory. It was discovered that libmysofa incorrectly handled certain input files. An attacker could possibly use this issue to cause a denial of service or other...

MSC-2022-4473

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...