Lucene search
K

87 matches found

Circl
Circl
added 2026/05/15 3:0 a.m.6 views

CVE-2026-4608

creationtimestamp| type| source ---|---|--- 2026-05-15 03:00:08+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mludokvtcu2l...

6.5CVSS5.8AI score0.00033EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2012-4608

Malware in sbrugna...

5CVSS6.1AI score0.005EPSS
Exploits0References3
Circl
Circl
added 2025/07/24 9:38 a.m.2 views

CVE-2025-4608

creationtimestamp| type| source ---|---|--- 2025-07-24 09:38:08+00:00| seen| Telegram/XrnQ9ahPDGSfeZHXrHzusmZ8c4WmvWEHzJBeW80BvrC9A0...

6.4CVSS4.8AI score0.00228EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2025/07/24 9:22 a.m.2 views

CVE-2025-4608 Structured Content <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via sc_fs_local_business Shortcode

The Structured Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's scfslocalbusiness shortcode in all versions up to, and including, 1.6.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS5.6AI score0.00228EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/07/24 9:22 a.m.6 views

CVE-2025-4608 Structured Content <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via sc_fs_local_business Shortcode

The Structured Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's scfslocalbusiness shortcode in all versions up to, and including, 1.6.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00228EPSS
Exploits0References5
CVE
CVE
added 2025/07/24 9:22 a.m.22 views

CVE-2025-4608

The CVE-2025-4608 case concerns the WordPress Structured Content plugin (WordPress) with a stored cross-site scripting flaw in the sc_fs_local_business shortcode. Affected versions are all up to and including 1.6.4, where insufficient input sanitization and output escaping on user-supplied attrib...

6.4CVSS5.5AI score0.00228EPSS
Exploits0References5
Patchstack
Patchstack
added 2025/07/23 9:31 p.m.4 views

WordPress Structured Content plugin <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via sc_fs_local_business Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via scfslocalbusiness Shortcode vulnerability discovered by muhammad yudha in WordPress Plugin Structured Content versions = 1.6.4...

6.4CVSS5.5AI score0.00228EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/22 4:55 a.m.6 views

CVE-2013-4608

Cross-site scripting XSS vulnerability in REDCap before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via vectors involving the Graphical Data View & Descriptive Stats page...

4.3CVSS5.8AI score0.00225EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/29 1:54 a.m.21 views

Security Bulletin: IBM Workload scheduler vulnerable to CVE-2019-4608 and CVE-2020-5028

Summary IBM Tivoli Dynamic Workload Console is potentially vulnerable to cross-site scripting. Vulnerability Details CVEID:CVE-2019-4608 DESCRIPTION: IBM Tivoli Workload Scheduler is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web ...

5.4CVSS5.2AI score0.00211EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/05 8:14 p.m.14 views

CVE-2022-4608

A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-104 is configured with support for IEC 62351-3. After session resumption interval is expired an RTU500 initiated update of...

7.5CVSS6.7AI score0.00074EPSS
Exploits0References1
Circl
Circl
added 2025/01/28 3:22 a.m.0 views

CVE-2014-4608

creationtimestamp| type| source ---|---|--- 2025-01-28 03:22:55+00:00| seen| Telegram/NgL8djqURFf-wT2WisqVtoXKjBTwFjgsdiHpw3J2jDJbcJQb...

7.5CVSS5.5AI score0.08604EPSS
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/01/24 8:23 p.m.3 views

Malicious code in wlwz-2312-4608 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eef37c4365501d5985daf112a5c68b8b5389d4ea31a70d30cc00a9ba0a7fb553 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2024/01/24 8:23 p.m.7 views

MAL-2024-592 Malicious code in wlwz-2312-4608 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eef37c4365501d5985daf112a5c68b8b5389d4ea31a70d30cc00a9ba0a7fb553 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Circl
Circl
added 2023/10/25 10:52 p.m.1 views

CVE-2023-4608

creationtimestamp| type| source ---|---|--- 2023-10-25 22:52:44+00:00| seen| https://t.me/cibsecurity/72891...

7.2CVSS7AI score0.00095EPSS
Exploits0References1
CVE
CVE
added 2023/10/24 8:25 p.m.48 views

CVE-2023-4608

CVE-2023-4608 is an authenticated SQL injection vulnerability in Lenovo ThinkSystem’s XClarity Controller (XCC). The issue allows blind SQL injection in limited cases via a crafted API command when exploited by an authenticated XCC user with elevated privileges. Affected are ThinkSystem v2 and v3...

7.2CVSS7.3AI score0.00095EPSS
Exploits0References1Affected Software1
Lenovo
Lenovo
added 2023/09/12 10:13 p.m.5 views

Lenovo XClarity Controller (XCC) Vulnerabilities - Lenovo Support US

No description provided...

7.3AI score
Exploits0
Circl
Circl
added 2023/07/26 12:28 p.m.2 views

CVE-2022-4608

creationtimestamp| type| source ---|---|--- 2023-07-26 12:28:28+00:00| seen| https://t.me/cibsecurity/67292...

7.5CVSS7.3AI score0.00074EPSS
Exploits0References1
CVE
CVE
added 2023/07/26 5:26 a.m.42 views

CVE-2022-4608

CVE-2022-4608 affects Hitachi Energy RTU500 series (CMU) via the HCI IEC 60870-5-104 function. The root cause is missing input validation in the HCI 60870-5-104 path when IEC 62351-3/5 support is enabled, leading to a stack overflow after the session resumption interval expires when the CMU updat...

7.5CVSS7.4AI score0.00074EPSS
Exploits0References2Affected Software1
F5 Networks
F5 Networks
added 2023/02/21 7:41 p.m.51 views

K15512: LZO decompressor vulnerability CVE-2014-4608

Security Advisory Description DISPUTED Multiple integer overflows in the lzo1xdecompresssafe function in lib/lzo/lzo1xdecompresssafe.c in the LZO decompressor in the Linux kernel before 3.15.2 allow context-dependent attackers to cause a denial of service memory corruption via a crafted Literal...

7.5CVSS6.3AI score0.08604EPSS
Exploits0
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.17 views

Ubuntu: Security Advisory (USN-2415-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.1AI score0.08604EPSS
Exploits0References2
Rows per page
Query Builder