Lucene search
K

93 matches found

RedhatCVE
RedhatCVE
•added 2026/03/26 2:58 p.m.•4 views

CVE-2026-4553

A vulnerability was identified in Tenda F453 1.0.0.3. Impacted is the function fromNatlimit of the file /goform/Natlimit of the component Parameters Handler. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit is...

9CVSS8AI score0.00037EPSS
Exploits1References1
Circl
Circl
•added 2026/03/21 5:7 p.m.•2 views

CVE-2026-4553

creationtimestamp| type| source ---|---|--- 2026-03-21 17:07:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116268258506979437 2026-03-22 15:16:04+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4553 2026-03-22 18:28:08+00:00| seen|...

9CVSS7.2AI score0.00037EPSS
Exploits1References5
Positive Technologies
Positive Technologies
•added 2026/03/21 12:0 a.m.•5 views

PT-2026-26944

A vulnerability was identified in Tenda F453 1.0.0.3. Impacted is the function fromNatlimit of the file /goform/Natlimit of the component Parameters Handler. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit is...

9CVSS7.9AI score0.00037EPSS
Exploits1References11
EUVD
EUVD
•added 2026/01/24 9:8 a.m.•3 views

EUVD-2026-4553

The JavaScript Notifier plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin settings in all versions up to, and including, 1.2.8. This is due to insufficient input sanitization and output escaping on user-supplied attributes in the wpfooter action. This makes it possible...

4.4CVSS5.8AI score0.00051EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/01/20 12:0 a.m.•2 views

MiracleLinux 8 : nodejs:18 (AXSA:2022-4553:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-4553:01 advisory. nodejs-minimatch: ReDoS via the braceExpand function CVE-2022-3517 nodejs: DNS rebinding in inspect via invalid octal IP address CVE-2022-43548...

8.1CVSS7.5AI score0.00565EPSS
Exploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/23 4:47 a.m.•7 views

CVE-2023-4553

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. AppBuilder configuration files are viewable by unauthenticated users. This issue affects AppBuilder: from 21.2 before 23.2...

5.3CVSS7AI score0.0007EPSS
Exploits0
RedhatCVE
RedhatCVE
•added 2025/05/22 4:22 a.m.•8 views

CVE-2011-4553

Multiple open redirect vulnerabilities in One Click Orgs before 1.2.3 allow 1 remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the returnto parameter, and allow 2 remote authenticated users to redirect users to arbitrary web sites and conduct phishing...

5.8CVSS6.9AI score0.00224EPSS
Exploits0References1
Circl
Circl
•added 2025/05/12 3:30 a.m.•24 views

CVE-2025-4553

creationtimestamp| type| source ---|---|--- 2025-05-12 03:30:48+00:00| published-proof-of-concept| Telegram/uE9n1u9a9if1NvQFWLw0wRNMutCfzKYCXy9qgufB4ZCJSI 2025-05-12 04:24:23+00:00| seen| https://t.me/cvedetector/25059 2025-05-12 04:42:09+00:00| seen|...

9.8CVSS7.3AI score0.00204EPSS
Exploits1References2
Vulnrichment
Vulnrichment
•added 2025/05/12 12:0 a.m.•8 views

CVE-2025-4553 PHPGurukul Apartment Visitors Management System bwdates-reports-details.php sql injection

A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may...

7.5CVSS7.6AI score0.00204EPSS
Exploits1References5
CVE
CVE
•added 2025/05/12 12:0 a.m.•77 views

CVE-2025-4553

CVE-2025-4553 concerns a SQL injection in PHPGurukul Apartment Visitors Management System 1.0, triggered by improper handling of the fromdate/todate parameters in /admin/bwdates-reports-details.php. The issue allows remote exploitation and has been publicly disclosed. Multiple connected sources c...

9.8CVSS7.4AI score0.00204EPSS
Exploits1References5Affected Software1
Patchstack
Patchstack
•added 2024/05/21 12:0 a.m.•9 views

WordPress Shortcodes Ultimate Plugin <= 7.1.5 is vulnerable to Cross Site Scripting (XSS)

Software Shortcodes Ultimate Type Plugin Vulnerable versions = 7.1.5 Fixed in 7.1.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4553 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b7f8c1d5e896 Credits wesley wcraft Requir...

6.4CVSS5.8AI score0.00393EPSS
Exploits0References3Affected Software1
Circl
Circl
•added 2024/01/29 10:21 p.m.•0 views

CVE-2023-4553

creationtimestamp| type| source ---|---|--- 2024-01-29 22:21:54+00:00| seen| https://t.me/ctinow/175565...

5.3CVSS5.5AI score0.0007EPSS
Exploits0References1
CVE
CVE
•added 2024/01/29 8:56 p.m.•48 views

CVE-2023-4553

CVE-2023-4553 affects OpenText AppBuilder (versions 21.2 through 23.2). The vulnerability is due to improper input validation, enabling probing of system files. Additionally, AppBuilder configuration files are viewable by unauthenticated users. Impact is described as low confidentiality risk (C) ...

5.3CVSS5.4AI score0.0007EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/29 8:56 p.m.•10 views

CVE-2023-4553 Unauthenticated Access to AppBuilder Configuration Files

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. AppBuilder configuration files are viewable by unauthenticated users. This issue affects AppBuilder: from 21.2 before 23.2...

5.3CVSS7AI score0.0007EPSS
Exploits0References1
Circl
Circl
•added 2024/01/05 4:36 p.m.•2 views

GHSA-4553-HQ82-8654

creationtimestamp| type| source ---|---|--- 2024-01-05 16:36:44+00:00| seen| https://t.me/ctinow/163584...

4.8AI score
Exploits0References1
NVD
NVD
•added 2023/09/14 7:16 p.m.•6 views

CVE-2018-4553

Rejected reason: This candidate is unused by its CNA...

6.6AI score
Exploits0
CVE
CVE
•added 2023/01/30 8:31 p.m.•51 views

CVE-2022-4553

The CVE-2022-4553 entry concerns the WordPress plugin FL3R FeelBox (

4.3CVSS4.5AI score0.00097EPSS
Exploits2References1Affected Software1
Patchstack
Patchstack
•added 2023/01/04 12:0 a.m.•8 views

WordPress FL3R FeelBox Plugin <= 8.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software FL3R FeelBox Type Plugin Vulnerable versions = 8.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-4553 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 95a213692f20 Credits WPScan Required privilege...

4.3CVSS6.6AI score0.00097EPSS
Exploits2References3Affected Software1
OpenVAS
OpenVAS
•added 2022/01/28 12:0 a.m.•25 views

Mageia: Security Advisory (MGASA-2016-0171)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS8.4AI score0.82841EPSS
Exploits0References5
OpenVAS
OpenVAS
•added 2021/06/09 12:0 a.m.•22 views

SUSE: Security Advisory (SUSE-SU-2013:1923-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.9CVSS6.7AI score0.00628EPSS
Exploits0References2
Rows per page
Query Builder