Lucene search
K

184 matches found

Nuclei
Nuclei
added yesterday21 views

Movies <= 0.6 - Cross-Site Scripting

A cross-site scripting vulnerability in the Movies plugin 0.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filename parameter to getid3/demos/demo.mimeonly.php. id: CVE-2014-4539 info: name: Movies = 0.6 - Cross-Site Scripting author: daffainfo...

6.1CVSS6.4AI score0.0161EPSS
Exploits2References4
IBM Security Bulletins
IBM Security Bulletins
added 4 days ago10 views

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses pygments-2.19.2-py3-none-any.whl which is vulnerable to CVE-2026-4539

Summary IBM Maximo Application Suite - Visual Inspection component uses pygments-2.19.2-py3-none-any.whl which is vulnerable to CVE-2026-4539 , This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-4539 DESCRIPTION: A security fla...

4.8CVSS5.4AI score0.00007EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/05/06 4:4 a.m.4 views

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in pygments-2.19.2-py3-none-any.whl

Summary IBM Watson Discovery Cartridge affected by vulnerability in pygments-2.19.2-py3-none-any.whl Vulnerability Details CVEID:CVE-2026-4539 DESCRIPTION: A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file...

4.8CVSS5.3AI score0.00007EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/05/04 6:57 a.m.2 views

Security Bulletin: IBM Maximo Application Suite - Monitor Component uses pygments-2.19.2-py3-none-any.whl which is vulnerable to CVE-2026-4539.

Summary Security Bulletin: IBM Maximo Application Suite - Monitor Component uses pygments-2.19.2-py3-none-any.whl which is vulnerable to CVE-2026-4539.This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-4539 DESCRIPTION: A security flaw has been...

4.8CVSS5.3AI score0.00007EPSS
Exploits0Affected Software1
OSV
OSV
added 2026/04/30 5:22 p.m.2 views

SUSE-SU-2026:1667-1 Security update for python-Pygments

This update for python-Pygments fixes the following issues: - CVE-2026-4539: inefficient regex for GUID and ID pattern matching can lead to archetype lexer ReDoS bsc1260796...

4.8CVSS5.8AI score0.00007EPSS
Exploits0References3
SUSE Linux
SUSE Linux
added 2026/04/30 5:22 p.m.1 views

Security update for python-Pygments

This update for python-Pygments fixes the following issues: CVE-2026-4539: inefficient regex for GUID and ID pattern matching can lead to archetype lexer ReDoS bsc1260796. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypp...

3.3CVSS5.8AI score0.00007EPSS
Exploits0References4
SUSE Linux
SUSE Linux
added 2026/04/30 5:22 p.m.1 views

Security update for python-Pygments

This update for python-Pygments fixes the following issues: CVE-2026-4539: inefficient regex for GUID and ID pattern matching can lead to archetype lexer ReDoS bsc1260796. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypp...

3.3CVSS5.8AI score0.00007EPSS
Exploits0References4
OSV
OSV
added 2026/04/30 5:22 p.m.2 views

SUSE-SU-2026:1666-1 Security update for python-Pygments

This update for python-Pygments fixes the following issues: - CVE-2026-4539: inefficient regex for GUID and ID pattern matching can lead to archetype lexer ReDoS bsc1260796...

4.8CVSS5.8AI score0.00007EPSS
Exploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2026/04/30 11:40 a.m.2 views

Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which is vulnerable to multiple CVEs.

Summary IBM Maximo Application Suite uses qs-6.13.0.tgz, qs-6.14.0.tgz, pygments-2.19.2-py3-none-any.whl, and cryptography-46.0.5-cp311-abi3-manylinux234x8664.whl, which are vulnerable to CVE-2025-15284, CVE-2026-2391, CVE-2026-4539, and CVE-2026-34073. This bulletin contains information regardin...

7.5CVSS5.9AI score0.0005EPSS
Exploits2Affected Software1
Mageia
Mageia
added 2026/04/08 2:49 a.m.4 views

Updated python-pygments packages fix security vulnerability

A security flaw in Pygments function AdlLexer in archetype.py stems from a regular expression having an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles. CVE-2026-4539...

4.8CVSS5.9AI score0.00007EPSS
Exploits0References2
OSV
OSV
added 2026/04/08 2:49 a.m.1 views

MGASA-2026-0090 Updated python-pygments packages fix security vulnerability

A security flaw in Pygments function AdlLexer in archetype.py stems from a regular expression having an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles. CVE-2026-4539...

4.8CVSS5.7AI score0.00007EPSS
Exploits0References3
Circl
Circl
added 2026/03/22 10:4 a.m.0 views

CVE-2026-4539

creationtimestamp| type| source ---|---|--- 2026-03-22 10:04:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhncadsars2y 2026-03-26 00:23:45+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mhwdmvvx5o23 2026-03-26 00:23:45+00:00| seen|...

4.8CVSS5.7AI score0.00007EPSS
Exploits0References5
vulnersOsv
vulnersOsv
added 2026/03/22 8:38 a.m.0 views

a-mailx (=0.1.0), a2grunnerp (>=0.1.0 <=0.1.8) +1641 more potentially affected by CVE-2026-4539 via pygments (>=2.0.2 <=2.1.3)

pygments PYPI version =2.0.2, =0.1.0, =0.1.0, =0.0.2, =2.0.0.1, =0.1.2, =0.0.1, =0.3.4, =0.4.0, =0.0.6, =0.1.0, =0.1.2 and more Source cves: CVE-2026-4539 Source advisory: SNYK:PYTHON-PYGMENTS-15746419...

4.8CVSS5.8AI score0.00007EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2026/03/22 6:30 a.m.0 views

a-mailx (=0.1.0), a2grunnerp (>=0.1.0 <=0.1.8) +1647 more potentially affected by CVE-2026-4539 via pygments (>=1.6.0 <=2.1.3)

pygments PYPI version =1.6.0, =0.1.0, =0.1.0, =0.0.2, =2.0.0.1, =0.1.2, =0.0.1, =0.3.4, =0.4.0, =0.0.6, =0.1.0, =0.1.2 and more Source cves: CVE-2026-4539 Source advisory: OSV:GHSA-5239-WWWM-4PMQ...

4.8CVSS5.8AI score0.00007EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2026/03/22 6:16 a.m.2 views

CVE-2026-4539

A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local access. The exploit has been released...

4.8CVSS5.5AI score0.00007EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/03/22 5:35 a.m.32 views

CVE-2026-4539 pygments archetype.py AdlLexer redos

A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expression complexity. The attack is only possible with local access. The exploit has been released...

4.8CVSS0.00007EPSS
Exploits0References5
OSV
OSV
added 2026/03/04 5:27 a.m.0 views

MINI-7CFC-4539-FRJF

Bulletin has no description...

5.3CVSS7.1AI score0.00023EPSS
Exploits0
OSV
OSV
added 2026/01/29 12:48 a.m.1 views

CGA-HPXM-MHV4-4539

Bulletin has no description...

5CVSS5.8AI score0.01734EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:0 a.m.3 views

MiracleLinux 3 : subversion-1.6.11-7.AXS3.1 (AXSA:2011-46:01)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-46:01 advisory. Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files an...

6.8CVSS7.7AI score0.01955EPSS
Exploits2References3
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:0 a.m.3 views

MiracleLinux 4 : dhcp-4.1.1-25.P1.AXS4.1 (AXSA:2012-49:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-49:01 advisory. DHCP Dynamic Host Configuration Protocol is a protocol which allows individual devices on an IP network to get their own network configuration information IP...

5CVSS6.5AI score0.32265EPSS
Exploits0References2
Rows per page
Query Builder