ECHO-6877-FDD5-4605

Bulletin has no description...

CVE-2023-4605

A valid authenticated Lenovo XClarity Administrator LXCA user can potentially leverage an unauthenticated API endpoint to retrieve system event information...

CVE-2025-4605

creationtimestamp| type| source ---|---|--- 2025-08-15 14:03:50+00:00| seen| Telegram/uoBKmUEw4jtiaDtQVnbjX4GztYErJhYd77YBWyKgbWO3Q8...

CVE-2025-4605

A maliciously crafted .usdc file, when loaded through Autodesk Maya, can force an uncontrolled memory allocation vulnerability. A malicious actor may leverage this vulnerability to cause a denial-of-service DoS, or cause data corruption...

CVE-2025-4605

A maliciously crafted .usdc file, when loaded through Autodesk Maya, can force an uncontrolled memory allocation vulnerability. A malicious actor may leverage this vulnerability to cause a denial-of-service DoS, or cause data corruption...

CVE-2025-4605 USD File Parsing Memory Allocation Vulnerability

A maliciously crafted .usdc file, when loaded through Autodesk Maya, can force an uncontrolled memory allocation vulnerability. A malicious actor may leverage this vulnerability to cause a denial-of-service DoS, or cause data corruption...

CVE-2025-4605

CVE-2025-4605 relates to Autodesk Maya parsing of .usdc via MayaUSD, where an adversary‑crafted file can trigger an uncontrolled memory allocation, leading to DoS or data corruption. Connected sources specify affected software: Autodesk Maya (prior to 2025.3.1) and MayaUSD (prior to 0.32.0). The ...

CVE-2025-4605 USD File Parsing Memory Allocation Vulnerability

A maliciously crafted .usdc file, when loaded through Autodesk Maya, can force an uncontrolled memory allocation vulnerability. A malicious actor may leverage this vulnerability to cause a denial-of-service DoS, or cause data corruption...

CVE-2022-4605

Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...

WordPress Breakdance Plugin <= 1.7.1 is vulnerable to Remote Code Execution (RCE)

Software Breakdance Type Plugin Vulnerable versions = 1.7.1 Fixed in 1.7.2 OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2024-4605 Patch priority Medium CVSS severity Medium 8.8 Developer Claim ownership PSID 7a57cfb648b8 Credits Francesco Carlucci Required privilege...

CVE-2023-4605

A valid authenticated Lenovo XClarity Administrator LXCA user can potentially leverage an unauthenticated API endpoint to retrieve system event information...

CVE-2023-4605

The CVE-2023-4605 case describes an vulnerability in Lenovo XClarity Administrator (LXCA) where a valid authenticated LXCA user can potentially leverage an unauthenticated API endpoint to retrieve system event information. Affected component: LXCA’s API surface exposing system event data. Root ca...

Malicious code in wlwz-2312-4605 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8286c8471b479f0fa80efe007115219ae6aea7fd6be240f3d629aa97306143ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Lenovo XClarity Administrator (LXCA) Vulnerability - Lenovo Support US

No description provided...

CVE-2018-4605

Rejected reason: This candidate is unused by its CNA...

Debian: Security Advisory (DLA-307-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2015-4605

The mcopy function in softmagic.c in file 5.x, as used in the Fileinfo component in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, does not properly restrict a certain offset value, which allows remote attackers to cause a denial of service application crash or possibly execute...

CVE-2022-4605 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress

Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2022-4605

CVE-2022-4605 is a Cross-site Scripting (XSS) vulnerability stored in the FlatPress project, affecting versions prior to 1.3. Several CVE sources confirm the issue with a stored XSS in flatpressblog/flatpress. A PoC exists per Huntr (Stored XSS via SVG File), illustrating exploitation through SVG...

CVE-2022-4605 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress

Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...