Lucene search
K

71 matches found

CVE
CVE
added 2026/03/20 10:2 p.m.22 views

CVE-2026-4506

CVE-2026-4506 – Mindinventory MindSQL : A vulnerability in MindSQL up to version 0.2.1 affects the function ask_db in mindsql/core/mindsql_core.py. Manipulation of this function can lead to code injection. The attack is remote, and exploitation is publicly available. The vendor was contacted earl...

6.5CVSS6.3AI score0.00061EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/02/20 6:39 a.m.1 views

CVE-2017-4506

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

5.5AI score
Exploits0References1
OpenVAS
OpenVAS
added 2025/12/24 12:0 a.m.5 views

SUSE: Security Advisory (SUSE-SU-2025:4506-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.2AI score0.00062EPSS
Exploits0References13
OSV
OSV
added 2025/09/15 1:11 a.m.1 views

ECHO-4506-A352-EE8B

Bulletin has no description...

7.1CVSS7AI score0.00021EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:38 a.m.7 views

CVE-2011-4506

The UPnP IGD implementation on the Thomson aka Technicolor TG585 with firmware 7.x before 7.4.3.2 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability...

7.5CVSS7.3AI score0.00509EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:57 p.m.3 views

CVE-2006-4506

idmlib.sh in nxdrv in Novell Identity Manager IDM 3.0.1 allows local users to execute arbitrary commands via unspecified vectors, possibly involving the " quote and \ backslash characters and eval injection...

3.6CVSS7.7AI score0.0007EPSS
Exploits1References1
Circl
Circl
added 2025/05/10 4:36 p.m.15 views

CVE-2025-4506

creationtimestamp| type| source ---|---|--- 2025-05-10 16:36:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15899 2025-05-10 18:30:33+00:00| published-proof-of-concept| Telegram/5jCfy6rNIkT2KBC1Y0rQEULebmDfmr-lomqeEJy5sudorr4 2025-05-10 18:37:29+00:00| seen|...

9.8CVSS7.3AI score0.00204EPSS
Exploits1References4
NVD
NVD
added 2025/05/10 4:15 p.m.16 views

CVE-2025-4506

A vulnerability was found in Campcodes Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /routers/menu-router.php. The manipulation of the argument 1price leads to sql injection. The attack may be launched remotely. Th...

9.8CVSS0.00204EPSS
Exploits1References5
CVE
CVE
added 2025/05/10 4:0 p.m.63 views

CVE-2025-4506

CVE-2025-4506 affects Campcodes Online Food Ordering System 1.0. The vulnerability is a SQL injection in the file /routers/menu-router.php, triggered by manipulating the argument 1_price. It is exposed remotely and has been publicly disclosed. Several connected sources corroborate the issue and t...

9.8CVSS7.5AI score0.00204EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/05/10 4:0 p.m.21 views

CVE-2025-4506 Campcodes Online Food Ordering System menu-router.php sql injection

A vulnerability was found in Campcodes Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /routers/menu-router.php. The manipulation of the argument 1price leads to sql injection. The attack may be launched remotely. Th...

7.5CVSS0.00204EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/05/10 4:0 p.m.5 views

CVE-2025-4506 Campcodes Online Food Ordering System menu-router.php sql injection

A vulnerability was found in Campcodes Online Food Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /routers/menu-router.php. The manipulation of the argument 1price leads to sql injection. The attack may be launched remotely. Th...

7.5CVSS7.5AI score0.00204EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/02/05 8:20 p.m.6 views

CVE-2022-4506

Unrestricted Upload of File with Dangerous Type in GitHub repository openemr/openemr prior to 7.0.0.2...

8.8CVSS6.7AI score0.002EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2024/05/05 11:0 p.m.11 views

CVE-2024-4506 Ruijie RG-UAC ip_addr_edit_commit.php os command injection

A vulnerability has been found in Ruijie RG-UAC up to 20240428 and classified as critical. This vulnerability affects unknown code of the file /view/IPV6/ipv6Addr/ipaddreditcommit.php. The manipulation of the argument textipaddr/orgprelen/orgname leads to os command injection. The attack can be...

5.8CVSS7.5AI score0.00269EPSS
Exploits0References4
OSV
OSV
added 2024/01/24 8:23 p.m.7 views

MAL-2024-581 Malicious code in wlwz-2312-4506 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c725e4e6f54e9b0ede7a515374addf69c9d704eee0e334475385e4b693387bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/01/24 8:23 p.m.2 views

Malicious code in wlwz-2312-4506 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c725e4e6f54e9b0ede7a515374addf69c9d704eee0e334475385e4b693387bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OpenVAS
OpenVAS
added 2023/11/22 12:0 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2023:4506-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS9.1AI score0.92346EPSS
Exploits0References6
Circl
Circl
added 2023/09/27 6:46 p.m.1 views

CVE-2023-4506

creationtimestamp| type| source ---|---|--- 2023-09-27 18:46:09+00:00| seen| https://t.me/cibsecurity/71105...

6.5CVSS6.3AI score0.00415EPSS
Exploits2References1
Cvelist
Cvelist
added 2023/09/26 1:51 a.m.17 views

CVE-2023-4506 Active Directory Integration / LDAP Integration <= 4.1.10 - LDAP Passback

The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Passback in versions up to, and including, 4.1.10. This is due to insufficient validation when changing the LDAP server. This makes it possible for authenticated attackers, with administrative access an...

2.2CVSS6.5AI score0.00415EPSS
Exploits2References4
CVE
CVE
added 2023/09/26 1:51 a.m.57 views

CVE-2023-4506

CVE-2023-4506 affects the WordPress plugin Active Directory Integration / LDAP Integration (ldap-login-for-intranet-sites). The vulnerability arises from insufficient validation when changing the LDAP server, allowing authenticated users with administrative privileges to switch the LDAP server an...

6.5CVSS6.5AI score0.00423EPSS
Exploits2References4Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/26 1:51 a.m.7 views

CVE-2023-4506 Active Directory Integration / LDAP Integration <= 4.1.10 - LDAP Passback

The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Passback in versions up to, and including, 4.1.10. This is due to insufficient validation when changing the LDAP server. This makes it possible for authenticated attackers, with administrative access an...

2.2CVSS6.6AI score0.00415EPSS
Exploits2References4
Rows per page
Query Builder