93 matches found
CVE-2026-4553
A vulnerability was identified in Tenda F453 1.0.0.3. Impacted is the function fromNatlimit of the file /goform/Natlimit of the component Parameters Handler. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit is...
CVE-2026-4553
creationtimestamp| type| source ---|---|--- 2026-03-21 17:07:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116268258506979437 2026-03-22 15:16:04+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4553 2026-03-22 18:28:08+00:00| seen|...
PT-2026-26944
A vulnerability was identified in Tenda F453 1.0.0.3. Impacted is the function fromNatlimit of the file /goform/Natlimit of the component Parameters Handler. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit is...
EUVD-2026-4553
The JavaScript Notifier plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin settings in all versions up to, and including, 1.2.8. This is due to insufficient input sanitization and output escaping on user-supplied attributes in the wpfooter action. This makes it possible...
MiracleLinux 8 : nodejs:18 (AXSA:2022-4553:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-4553:01 advisory. nodejs-minimatch: ReDoS via the braceExpand function CVE-2022-3517 nodejs: DNS rebinding in inspect via invalid octal IP address CVE-2022-43548...
CVE-2023-4553
Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. AppBuilder configuration files are viewable by unauthenticated users. This issue affects AppBuilder: from 21.2 before 23.2...
CVE-2011-4553
Multiple open redirect vulnerabilities in One Click Orgs before 1.2.3 allow 1 remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the returnto parameter, and allow 2 remote authenticated users to redirect users to arbitrary web sites and conduct phishing...
CVE-2025-4553
creationtimestamp| type| source ---|---|--- 2025-05-12 03:30:48+00:00| published-proof-of-concept| Telegram/uE9n1u9a9if1NvQFWLw0wRNMutCfzKYCXy9qgufB4ZCJSI 2025-05-12 04:24:23+00:00| seen| https://t.me/cvedetector/25059 2025-05-12 04:42:09+00:00| seen|...
CVE-2025-4553 PHPGurukul Apartment Visitors Management System bwdates-reports-details.php sql injection
A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may...
CVE-2025-4553
CVE-2025-4553 concerns a SQL injection in PHPGurukul Apartment Visitors Management System 1.0, triggered by improper handling of the fromdate/todate parameters in /admin/bwdates-reports-details.php. The issue allows remote exploitation and has been publicly disclosed. Multiple connected sources c...
WordPress Shortcodes Ultimate Plugin <= 7.1.5 is vulnerable to Cross Site Scripting (XSS)
Software Shortcodes Ultimate Type Plugin Vulnerable versions = 7.1.5 Fixed in 7.1.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4553 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b7f8c1d5e896 Credits wesley wcraft Requir...
CVE-2023-4553
creationtimestamp| type| source ---|---|--- 2024-01-29 22:21:54+00:00| seen| https://t.me/ctinow/175565...
CVE-2023-4553
CVE-2023-4553 affects OpenText AppBuilder (versions 21.2 through 23.2). The vulnerability is due to improper input validation, enabling probing of system files. Additionally, AppBuilder configuration files are viewable by unauthenticated users. Impact is described as low confidentiality risk (C) ...
CVE-2023-4553 Unauthenticated Access to AppBuilder Configuration Files
Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. AppBuilder configuration files are viewable by unauthenticated users. This issue affects AppBuilder: from 21.2 before 23.2...
GHSA-4553-HQ82-8654
creationtimestamp| type| source ---|---|--- 2024-01-05 16:36:44+00:00| seen| https://t.me/ctinow/163584...
CVE-2018-4553
Rejected reason: This candidate is unused by its CNA...
CVE-2022-4553
The CVE-2022-4553 entry concerns the WordPress plugin FL3R FeelBox (
WordPress FL3R FeelBox Plugin <= 8.1 is vulnerable to Cross Site Request Forgery (CSRF)
Software FL3R FeelBox Type Plugin Vulnerable versions = 8.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-4553 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 95a213692f20 Credits WPScan Required privilege...
Mageia: Security Advisory (MGASA-2016-0171)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2013:1923-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...