Lucene search
K

93 matches found

Circl
Circl
added 2 days ago3 views

CVE-2021-4479

creationtimestamp| type| source ---|---|--- 2026-06-02 21:39:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mndkmh7dlw27...

6.3CVSS5.8AI score0.00043EPSS
Exploits0References1
Circl
Circl
added 2026/04/14 7:53 a.m.0 views

CVE-2026-4479

creationtimestamp| type| source ---|---|--- 2026-04-14 07:53:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjgvlvjugw23...

4.4CVSS5.7AI score0.00031EPSS
Exploits0References1
OSV
OSV
added 2026/02/16 12:0 a.m.2 views

DLA-4479-1 wireshark - security update

Bulletin has no description...

7.8CVSS5.1AI score0.00176EPSS
Exploits5
NVD
NVD
added 2026/01/06 2:15 a.m.1 views

CVE-2025-20806

In dpe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10114835; Issue ID: MSV-4479...

6.7CVSS0.00008EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2014-4479

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3, allows remote attackers...

6.8CVSS6.2AI score0.00913EPSS
Exploits0References2
Circl
Circl
added 2025/06/19 4:41 a.m.2 views

CVE-2025-4479

creationtimestamp| type| source ---|---|--- 2025-06-19 04:41:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18837...

6.4CVSS4.8AI score0.00157EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/19 3:40 a.m.6 views

CVE-2025-4479 ElementsKit Lite <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget

The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin image comparison widget's before/after labels in all versions up to, and including, 3.5.2 due to insufficient input sanitization and output escaping on user supplied...

6.4CVSS0.00157EPSS
Exploits0References4
CVE
CVE
added 2025/06/19 3:40 a.m.64 views

CVE-2025-4479

CVE-2025-4479 corresponds to a stored XSS flaw in the ElementsKit Lite/ElementsKit Elementor Addons and Templates WordPress plugin (versions

6.4CVSS5.7AI score0.00157EPSS
Exploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/06/19 3:40 a.m.4 views

CVE-2025-4479 ElementsKit Lite <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison Widget

The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin image comparison widget's before/after labels in all versions up to, and including, 3.5.2 due to insufficient input sanitization and output escaping on user supplied...

6.4CVSS5.9AI score0.00157EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 12:14 a.m.4 views

CVE-2022-4479

The Table of Contents Plus WordPress plugin before 2212 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

5.4CVSS5.9AI score0.00252EPSS
Exploits2References1
Circl
Circl
added 2025/04/24 7:6 p.m.0 views

RHSA-2024:4479

creationtimestamp| type| source ---|---|--- 2025-04-24 19:06:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13317...

4.8AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/06/15 2:2 a.m.17 views

CVE-2024-4479 Jeg Elementor Kit <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Tabs and JKit - Accordion Widgets

The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sggeneraltoggletabenable and sgaccordionstyle attributes within the plugin's JKit - Tabs and JKit - Accordion widget, respectively, in all versions up to, and including, 2.6.5 due to insufficient input...

6.4CVSS5.8AI score0.00251EPSS
Exploits0References6
Patchstack
Patchstack
added 2024/06/14 12:0 a.m.11 views

WordPress Jeg Elementor Kit Plugin <= 2.6.5 is vulnerable to Cross Site Scripting (XSS)

Software Jeg Elementor Kit Type Plugin Vulnerable versions = 2.6.5 Fixed in 2.6.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4479 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2abdb6faa663 Credits wesley wcraft Required...

6.4CVSS5.8AI score0.00251EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2024/06/06 12:22 p.m.18 views

CGA-42R3-4479-2R68

Bulletin has no description...

7.5CVSS8.3AI score0.75268EPSS
Exploits1
Circl
Circl
added 2024/03/04 9:21 a.m.1 views

CVE-2023-4479

creationtimestamp| type| source ---|---|--- 2024-03-04 09:21:49+00:00| seen| https://t.me/ctinow/199102 2024-03-04 09:26:55+00:00| seen| https://t.me/ctinow/199103...

7.3CVSS7.3AI score0.0018EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/03/04 7:17 a.m.13 views

CVE-2023-4479 Stored XSS Vulnerability in M-Files Web

Stored XSS Vulnerability in M-Files Web versions before 23.8 allows attacker to execute script on users browser via stored HTML document within limited time period...

7.3CVSS5.7AI score0.0018EPSS
Exploits0References2
CVE
CVE
added 2024/03/04 7:17 a.m.49 views

CVE-2023-4479

The CVE-2023-4479 entry concerns M-Files Web, where versions prior to 23.8 are affected by a stored XSS vulnerability. The issue allows an attacker to execute scripts in a user’s browser via a stored HTML document within a limited time period, indicating a client-side impact stemming from how HTM...

7.3CVSS6.8AI score0.0018EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.19 views

openSUSE: Security Advisory for postgresql14 (SUSE-SU-2023:4479-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.5AI score0.02718EPSS
Exploits0References2
NVD
NVD
added 2023/01/09 11:15 p.m.11 views

CVE-2022-4479

The Table of Contents Plus WordPress plugin before 2212 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

5.4CVSS5.3AI score0.00252EPSS
Exploits2References1
CVE
CVE
added 2023/01/09 10:13 p.m.50 views

CVE-2022-4479

CVE-2022-4479 affects the WordPress plugin Table of Contents Plus v2212 and earlier. The vulnerability arises because the plugin does not validate and escape certain shortcode attributes before echoing them in the page, enabling a Stored XSS attack. Impacted scenario: a user with as little as the...

5.4CVSS5.3AI score0.00252EPSS
Exploits2References1Affected Software1
Rows per page
Query Builder