CVE-2026-4480

creationtimestamp| type| source ---|---|--- 2026-05-26 14:33:00+00:00| seen| https://vulnerability.circl.lu/bundle/ef598036-eda2-4311-807e-ebbdfb04a51d 2026-05-26 16:01:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmreiep6t62r 2026-05-27 02:01:29+00:00| seen|...

CVE-2026-4480

A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by...

SUSE-SU-2026:2076-1 Security update for samba

This update for samba fixes the following issues Security issues: - CVE-2026-1933: Missing access check on reparse point operations bsc1261188. - CVE-2026-2340: vfsworm does not block directory modification bsc1261158. - CVE-2026-3012: group policy certificate enrollment uses http: // without...

Debian dsa-6297 : ctdb - security update

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6297 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6297-1 [email protected]...

DLA-4480-1 roundcube - security update

Bulletin has no description...

EUVD-2026-4480

Discord Client Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Discord Client. An attacker must first obtain the ability to execute low-privileged code on the target system in...

CVE-2025-20805

In dpe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10114696; Issue ID: MSV-4480...

CVE-2025-20805

CVE-2025-20805 affects dpe with a memory corruption via use-after-free. The issue can lead to local escalation of privilege if an entity already has System privileges, with no user interaction required. Patch ALPS10114696 mitigates this, under MSV-4480. Connected sources (Red Hat, NVD, CVE record...

CVE-2025-20805

In dpe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10114696; Issue ID: MSV-4480...

CVE-2025-4480

A vulnerability was found in code-projects Simple College Management System 1.0. It has been declared as critical. This vulnerability affects the function input of the component Add New Student. The manipulation of the argument name/branch leads to stack-based buffer overflow. It is possible to...

CVE-2025-4480

creationtimestamp| type| source ---|---|--- 2025-05-09 17:25:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15786 2025-05-09 18:12:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loqzm7ts2ca2 2025-05-09...

CVE-2022-4480

creationtimestamp| type| source ---|---|--- 2025-04-04 18:36:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10518...

CVE-2024-4480

creationtimestamp| type| source ---|---|--- 2025-03-25 19:25:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8745...

CVE-2024-4480 WP Prayer II <= 2.4.7 - Email Settings Update via CSRF

The WP Prayer II WordPress plugin through 2.4.7 does not have CSRF check in place when updating its email settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

WordPress WP Prayer II Plugin <= 2.4.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Prayer II Type Plugin Vulnerable versions = 2.4.7 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-4480 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4976d5ae1cf6 Credits Bob Matyas Required...

SUSE: Security Advisory (SUSE-SU-2023:4480-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-4480

Rejected reason: This candidate is unused by its CNA...

CVE-2023-4480

creationtimestamp| type| source ---|---|--- 2023-09-05 18:17:05+00:00| seen| https://t.me/cibsecurity/69855 2023-09-05 21:06:26+00:00| seen| https://t.me/ctinow/134883...

CVE-2023-4480

Due to an out-of-date dependency in the “Fusion File Manager” component accessible through the admin panel, an attacker can send a crafted request that allows them to read the contents of files on the system accessible within the privileges of the running process. Additionally, they may write fil...

CVE-2023-4480 Arbitrary File Read in Fusion File Manager

Due to an out-of-date dependency in the “Fusion File Manager” component accessible through the admin panel, an attacker can send a crafted request that allows them to read the contents of files on the system accessible within the privileges of the running process. Additionally, they may write fil...