Lucene search
K

109 matches found

Circl
Circl
added 2026/03/23 4:42 p.m.1 views

CVE-2026-4590

creationtimestamp| type| source ---|---|--- 2026-03-23 16:42:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhqivwnuqq2i...

3.1CVSS5.8AI score0.0002EPSS
Exploits0References1
CVE
CVE
added 2026/03/23 2:24 p.m.2 views

CVE-2026-4590

CVE-2026-4590 affects kalcaddle kodbox 1.64. The vulnerable element is the loginSubmit API component, specifically an unknown function in /workspace/source-code/plugins/oauth/controller/bind/index.class.php. Manipulating the argument third enables cross-site request forgery (CSRF). The issue is e...

3.1CVSS5AI score0.0002EPSS
Exploits0References4
EUVD
EUVD
added 2026/01/24 6:30 a.m.1 views

EUVD-2026-4590

Not used...

5.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/25 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2016-4590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebKit in Apple iOS before 9.3.3 and Safari before 9.1.2 mishandles about: URLs, which allows remote attackers to bypass the Same Origin Policy via a crafted we...

5.4CVSS6.7AI score0.00592EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/05/31 6:40 a.m.3 views

CVE-2025-4590 Daisycon prijsvergelijkers <= 4.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Daisycon prijsvergelijkers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'daisyconuitvaart' shortcode in all versions up to, and including, 4.9.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible...

6.4CVSS6AI score0.00163EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/05/30 9:35 p.m.6 views

WordPress Daisycon prijsvergelijkers plugin <= 4.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Chuck in WordPress Plugin Daisycon prijsvergelijkers versions = 4.8.4...

6.4CVSS5.5AI score0.00163EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/22 1:3 a.m.5 views

CVE-2010-4590

Cross-site scripting XSS vulnerability in HTTP Access Services HTTP-AS in the Connection Manager in IBM Lotus Mobile Connect LMC before 6.1.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.8AI score0.00256EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2013-4590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 allows attackers to obtain Tomcat internals information by leveraging the presence of ...

4.3CVSS6.8AI score0.00922EPSS
Exploits1References2
GithubExploit
GithubExploit
added 2024/08/19 7:8 p.m.317 views

Exploit for Classic Buffer Overflow in Kimmov Frhed

CVE-2023-4590 - PoC of Frhed Free hex editor v1...

9.8CVSS8.8AI score0.00411EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2024/07/17 12:0 a.m.22 views

RHEL 8 : firefox (RHSA-2024:4590)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:4590 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: Mozilla:...

7.5CVSS7.5AI score0.0038EPSS
Exploits0References8
NVD
NVD
added 2024/05/07 2:15 p.m.10 views

CVE-2024-4590

A vulnerability was found in DedeCMS 5.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /src/dede/sysinfo.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the publ...

5CVSS4.8AI score0.00079EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/05/07 1:31 p.m.13 views

CVE-2024-4590 DedeCMS sys_info.php cross-site request forgery

A vulnerability was found in DedeCMS 5.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /src/dede/sysinfo.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the publ...

5CVSS6.6AI score0.00079EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/05/07 1:31 p.m.14 views

CVE-2024-4590 DedeCMS sys_info.php cross-site request forgery

A vulnerability was found in DedeCMS 5.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /src/dede/sysinfo.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the publ...

5CVSS4.9AI score0.00079EPSS
Exploits1References4
Circl
Circl
added 2023/12/17 6:36 a.m.0 views

CVE-2023-4590

creationtimestamp| type| source ---|---|--- 2023-12-17 06:36:35+00:00| seen| https://t.me/ctinow/155514...

9.8CVSS8.7AI score0.00411EPSS
Exploits1References1
Cvelist
Cvelist
added 2023/11/27 12:8 p.m.19 views

CVE-2023-4590 Buffer Overflow vulnerability in Frhed

Buffer overflow vulnerability in Frhed hex editor, affecting version 1.6.0. This vulnerability could allow an attacker to execute arbitrary code via a long filename argument through the Structured Exception Handler SEH registers...

7.3CVSS9.8AI score0.00411EPSS
Exploits1References1
CVE
CVE
added 2023/11/27 12:8 p.m.28 views

CVE-2023-4590

Summary: CVE-2023-4590 affects Frhed hex editor v1.6.0. A buffer overflow via a long filename argument triggers in the Structured Exception Handler (SEH) registers, potentially allowing arbitrary code execution. Practical details: a GitHub post ( exploit/PoC ) demonstrates a working exploit for F...

9.8CVSS8.8AI score0.00411EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2023/09/14 7:16 p.m.3 views

CVE-2018-4590

Rejected reason: This candidate is unused by its CNA...

6.6AI score
Exploits0
Circl
Circl
added 2022/12/17 10:30 p.m.0 views

CVE-2022-4590

creationtimestamp| type| source ---|---|--- 2022-12-17 22:30:30+00:00| seen| https://t.me/cibsecurity/54808...

6.1CVSS6.1AI score0.00272EPSS
Exploits0References1
CVE
CVE
added 2022/12/17 12:0 a.m.50 views

CVE-2022-4590

CVE-2022-4590 affects mschaef toto up to version 1.4.20 in the Todo List Handler component. The issue is a cross-site scripting vulnerability that can be triggered remotely. Upgrading to version 1.4.21 addresses the issue; the patch is identified as fdc825ac5249f40683377e8a526a06cdc6870125 (VDB-2...

6.1CVSS4.8AI score0.00272EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2022/12/17 12:0 a.m.10 views

CVE-2022-4590 mschaef toto Todo List cross site scripting

A vulnerability was found in mschaef toto up to 1.4.20. It has been classified as problematic. This affects an unknown part of the component Todo List Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.4.21 is able to...

3.5CVSS6.2AI score0.00272EPSS
Exploits0References3
Rows per page
Query Builder