CVE-2025-0759

creationtimestamp| type| source ---|---|--- 2025-02-27 15:29:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5687 2025-08-22 14:52:22+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...

CVE-2025-1689

creationtimestamp| type| source ---|---|--- 2025-02-27 10:22:17+00:00| seen| https://t.me/cvedetector/19028 2025-08-22 14:52:22+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...

CVE-2025-1634

creationtimestamp| type| source ---|---|--- 2025-02-26 17:24:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5548 2025-02-26 20:08:14+00:00| seen| https://t.me/cvedetector/18941 2025-08-22 14:52:23+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c 2026-04-20 21:21:38+00:00| seen|...

CVE-2025-0719

creationtimestamp| type| source ---|---|--- 2025-02-26 14:25:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5495 2025-08-22 14:52:23+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...

CVE-2025-23024

creationtimestamp| type| source ---|---|--- 2025-02-25 19:03:29+00:00| seen| https://t.me/cvedetector/18893 2025-08-22 14:52:23+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...

CVE-2025-26931

creationtimestamp| type| source ---|---|--- 2025-02-25 15:23:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5291 2025-08-22 14:52:23+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...

CVE-2025-26975

creationtimestamp| type| source ---|---|--- 2025-02-25 14:24:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5279 2025-02-25 17:22:47+00:00| seen| https://t.me/cvedetector/18874 2025-08-22 14:52:23+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...

CVE-2025-26977

creationtimestamp| type| source ---|---|--- 2025-02-25 14:24:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5278 2025-02-25 17:22:48+00:00| seen| https://t.me/cvedetector/18875 2025-08-22 14:52:23+00:00| seen| MISP/24306fae-b16b-4478-9297-d2973cdb583c...

Photon OS 5.0: Chromium PHSA-2023-5.0-0160

An update of the chromium package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0160. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : Python-RSA vulnerability (USN-4478-2)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4478-2 advisory. USN-4478-1 fixed a vulnerability in Python-RSA. This update provides the corresponding update for Ubuntu 16.04 ESM, Ubuntu 18.04 ESM and...

CVE-2023-4478

creationtimestamp| type| source ---|---|--- 2023-08-25 14:14:02+00:00| seen| https://t.me/cibsecurity/69186...

CVE-2023-4478 Parameter tampering in the registration resulting in blocked accounts to be created

Mattermost fails to restrict which parameters' values it takes from the request during signup allowing an attacker to register users as inactive, thus blocking them from later accessing Mattermost without the system admin activating their accounts...

CVE-2023-4478 Parameter tampering in the registration resulting in blocked accounts to be created

Mattermost fails to restrict which parameters' values it takes from the request during signup allowing an attacker to register users as inactive, thus blocking them from later accessing Mattermost without the system admin activating their accounts...

SUSE CVE-2010-4478

OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol, a...

SUSE CVE-2015-4478

Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not impose certain ECMAScript 6 requirements on JavaScript object properties, which allows remote attackers to bypass the Same Origin Policy via the reviver parameter to the JSON.parse method...

Ubuntu: Security Advisory (USN-4478-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-4478 Font Awesome < 4.3.2 - Contributor+ Stored XSS

The Font Awesome WordPress plugin before 4.3.2 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks against logged-in admins...

CVE-2022-4478 Font Awesome < 4.3.2 - Contributor+ Stored XSS

The Font Awesome WordPress plugin before 4.3.2 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks against logged-in admins...

CVE-2022-4478

The CVE refers to the Font Awesome WordPress plugin prior to version 4.3.2, where shortcode attributes were not properly validated or escaped before output, enabling Stored XSS by users with as low as a contributor to affect logged-in admins. Affected component is the plugin’s shortcode handling;...

K14317: OpenSSH J-PAKE vulnerability CVE-2010-4478

OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate. F5 products do not include J-PAKE in the OpenSSH programs a...