Lucene search
+L

71 matches found

OSV
OSV
added 2026/07/01 6:31 p.m.10 views

MINI-RJJH-442X-4639

Bulletin has no description...

5.3CVSS6.5AI score0.0019EPSS
SaveExploits0
OSV
OSV
added 2026/06/07 11:51 p.m.9 views

MINI-36VG-4639-W73G

Bulletin has no description...

9.1CVSS6.1AI score0.01557EPSS
SaveExploits1
Circl
Circl
added 2026/03/24 5:25 a.m.11 views

CVE-2026-4639

creationtimestamp| type| source ---|---|--- 2026-03-24 05:25:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhrtjzaysb2e 2026-03-24 06:58:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhryra3c622d 2026-06-14 03:07:09+00:00| seen|...

8.8CVSS5AI score0.00299EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/03/24 4:17 a.m.6 views

CVE-2026-4639 Galaxy Software Services|Vitals ESP - Incorrect Authorization

Vitals ESP developed by Galaxy Software Services has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to perform certain administrative functions, thereby escalating privileges...

8.8CVSS5.8AI score0.00299EPSS
SaveExploits0References2
OSV
OSV
added 2026/01/15 12:58 a.m.3 views

ECHO-8B0E-5F4E-4639

Bulletin has no description...

5.5CVSS6.9AI score0.00118EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2022-4639

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability, which was classified as critical, has been found in sslh. This issue affects the function hexdump of the file probe.c of the component Packet...

9.8CVSS6.9AI score0.00855EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/05/22 4:27 a.m.13 views

CVE-2011-4639

The 1 Traceroute and 2 Ping implementations in tools.php in SpamTitan WebTitan before 3.60 allow remote authenticated users to execute arbitrary commands via shell metacharacters in an argument, as demonstrated by an && ampersand ampersand sequence...

6.5CVSS7.7AI score0.01464EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/16 6:04 p.m.12 views

CVE-2025-4639

CWE-611 Improper Restriction of XML External Entity Reference in the getDocumentBuilder method of WebDav servlet in Peergos. This issue affects Peergos through version 1.1.0...

8.8CVSS7AI score0.00412EPSS
SaveExploits0References1
Circl
Circl
added 2025/05/14 6:32 p.m.30 views

CVE-2025-4639

creationtimestamp| type| source ---|---|--- 2025-05-14 18:32:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16372 2025-05-14 18:58:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp5okr4bfj2w...

8.8CVSS4.8AI score0.00412EPSS
SaveExploits0References2
NVD
NVD
added 2025/05/14 6:15 p.m.17 views

CVE-2025-4639

CWE-611 Improper Restriction of XML External Entity Reference in the getDocumentBuilder method of WebDav servlet in Peergos. This issue affects Peergos through version 1.1.0...

8.8CVSS0.00412EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/14 6:04 p.m.35 views

CVE-2025-4639 Improper Restriction of XML External Entity Reference in Peergos

CWE-611 Improper Restriction of XML External Entity Reference in the getDocumentBuilder method of WebDav servlet in Peergos. This issue affects Peergos through version 1.1.0...

8.8CVSS0.00412EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/14 6:04 p.m.53 views

CVE-2025-4639

CVE-2025-4639 affects Peergos up to version 1.1.0, due to CWE-611 (Improp er Restriction of XML External Entity Reference) in the WebDav servlet’s getDocumentBuilder() method. Multiple sources corroborate the issue in Peergos 1.1.0 and earlier, describing a vulnerability that can impact confident...

8.8CVSS7.2AI score0.00412EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/14 6:04 p.m.10 views

CVE-2025-4639 Improper Restriction of XML External Entity Reference in Peergos

CWE-611 Improper Restriction of XML External Entity Reference in the getDocumentBuilder method of WebDav servlet in Peergos. This issue affects Peergos through version 1.1.0...

8.8CVSS7AI score0.00412EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/17 11:15 a.m.38 views

CVE-2023-4639

A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorized da...

7.4CVSS0.01093EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
added 2024/11/17 11:15 a.m.20 views

CVE-2023-4639

A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorized da...

7.4CVSS7.1AI score0.01093EPSS
SaveExploits0References2
CVE
CVE
added 2024/11/17 10:21 a.m.156 views

CVE-2023-4639

Undertow contains a flaw in how cookies with certain value-delimiting characters are parsed from incoming requests. The issue can allow an attacker to construct a cookie value to exfiltrate HttpOnly cookies or spoof additional cookie values, leading to unauthorized data access or modification. Th...

7.4CVSS7.3AI score0.01093EPSS
SaveExploits0References10
Debian CVE
Debian CVE
added 2024/11/17 10:21 a.m.53 views

CVE-2023-4639

A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker to construct a cookie value to exfiltrate HttpOnly cookie values or spoof arbitrary additional cookie values, leading to unauthorized da...

7.4CVSS7.4AI score0.01093EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/07/18 12:00 a.m.22 views

RHEL 8 : qt5-qtbase (RHSA-2024:4639)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:4639 advisory. Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security...

8.6CVSS7.8AI score0.0049EPSS
SaveExploits0References4
OSV
OSV
added 2024/06/25 10:15 a.m.10 views

CVE-2024-4639

OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in IPSec configuration. An attacker could modify the intended commands sent to target functions, which could cause malicious users to execute unauthorized commands...

8.8CVSS5.9AI score0.00449EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/25 10:15 a.m.30 views

CVE-2024-4639

OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutralized inputs in IPSec configuration. An attacker could modify the intended commands sent to target functions, which could cause malicious users to execute unauthorized commands...

8.8CVSS0.00449EPSS
SaveExploits0References1
Rows per page
Query Builder