84 matches found
MINI-4625-WFQG-X3J3
Bulletin has no description...
CVE-2023-4625
Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period...
CVE-2022-4625
The Login Logout Menu WordPress plugin before 1.4.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...
Linux Distros Unpatched Vulnerability : CVE-2015-4625
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the authenticationagentnewcookie function in PolicyKit aka polkit before 0.113 allows local users to gain privileges by creating a large...
CVE-2024-4625
creationtimestamp| type| source ---|---|--- 2025-02-11 02:19:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulteohja27...
CVE-2025-24826
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Snap Deploy Windows before build 4625...
PT-2025-5581 · Acronis · Acronis Snap Deploy
Name of the Vulnerable Software and Affected Versions: Acronis Snap Deploy Windows versions before build 4625 Description: The issue is related to local privilege escalation due to insecure folder permissions. This allows for potential exploitation, though specific details about the estimated...
RHEL 9 : thunderbird (RHSA-2024:4625)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:4625 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: Mozilla: Race condition in permission assignment CVE-2024-660...
RHEL 7 : polkit (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - polkit: potential information disclosure vulnerability due to cookie counter wrapping CVE-2015-4625 -...
CVE-2011-4625
creationtimestamp| type| source ---|---|--- 2024-02-05 09:11:28+00:00| seen| https://t.me/ctinow/179056...
SUSE SLES12 Security Update : containerd, docker, runc (SUSE-SU-2023:4625-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4625-1 advisory. - A potential vulnerability in the AMD extension to Linux hwmon service may allow an attacker to use the Linux-based Running Averag...
CVE-2023-4625
creationtimestamp| type| source ---|---|--- 2023-11-06 07:30:31+00:00| seen| https://t.me/cibsecurity/73562...
CVE-2023-4625
Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period...
CVE-2023-4625 Denial-of-Service(DoS) Vulnerability in Web server function on MELSEC Series CPU module
Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period...
CVE-2023-4625
CVE-2023-4625 affects Mitsubishi Electric MELSEC iQ-F/iQ-R Series CPU modules web server, enabling remote unauthenticated attempts to log in and cause a persistent DoS by blocking legitimate users’ access for a period while attacks continue. Public details identify affected products and versions ...
CVE-2023-4625 Denial-of-Service(DoS) Vulnerability in Web server function on MELSEC Series CPU module
Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/iQ-R Series CPU modules Web server function allows a remote unauthenticated attacker to prevent legitimate users from logging into the Web server function for a certain period...
Mitsubishi Electric MELSEC iQ-F/iQ-R Series CPU Module (Update A)
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION : Exploitable remotely/low attack complexity Equipment : MELSEC iQ-F/iQ-R Series Vulnerability : Improper Restriction of Excessive Authentication Attempts 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a remote...
September 26, 2023—KB5030301 (OS Build 22000.2482) Preview
September 26, 2023—KB5030301 OS Build 22000.2482 Preview UPDATED 9/26/23 IMPORTANT After today, September 26, 2023, there will no longer be optional, non-security preview releases for Windows 11, version 21H2. Only cumulative monthly security updates will continue for the supported versions of...
SUSE CVE-2006-4625
PHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server httpd.conf options, such as safemode and openbasedir, via the inirestore function, which resets the values to their php.ini Master Value defaults...
CVE-2022-4625
The Login Logout Menu WordPress plugin before 1.4.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...