MINI-4659-FPG6-MMH8

Bulletin has no description...

CVE-2026-4659

creationtimestamp| type| source ---|---|--- 2026-04-17 09:15:54+00:00| seen| Telegram/AZQnk1q88GRrPNbtJYRdzFvYzsq1JKqTcpasHMe998GraXQ 2026-04-17 11:00:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjorhb7jcn26 2026-04-17 12:54:29+00:00| seen|...

CVE-2025-4659

The Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.4.4. This makes it possible for unauthenticated attackers to retrieve the full path of the web...

CVE-2025-4659 Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms <= 1.4.4 - Unauthenticated Full Path Disclosure

The Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.4.4. This makes it possible for unauthenticated attackers to retrieve the full path of the web...

CVE-2011-4659

Cisco TelePresence Software before TE 4.1.1 on the Cisco IP Video Phone E20 has a default password for the root account after an upgrade to TE 4.1.0, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtw69889, a different vulnerability than...

Rocky Linux 8 : gd (RLSA-2020:4659)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2020:4659 advisory. - gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific functio...

CVE-2023-4659

creationtimestamp| type| source ---|---|--- 2023-10-02 18:40:24+00:00| seen| Telegram/PUM7zcxVnlhqP3NLUoy12zppT7fxNAA7mmCsAsV5oVpGOw...

CVE-2023-4659 Cross-Site Request Forgery in Free5Gc

Cross-Site Request Forgery vulnerability, whose exploitation could allow an attacker to perform different actions on the platform as an administrator, simply by changing the token value to "admin". It is also possible to perform POST, GET and DELETE requests without any token value. Therefore, an...

CVE-2023-4659

The CVE-2023-4659 CSRF issue affects Free5GC, where an attacker can impersonate an administrator and perform POST/GET/DELETE actions without a token. Affected: Free5GC components exposing admin-level actions via CSRF with token value manipulations (e.g., setting token to 'admin'); impact: unprivi...

CVE-2018-4659

Rejected reason: This candidate is unused by its CNA...

CVE-2019-4659

CVE-2019-4659 is associated with IBM FileNet Content Manager/Case Foundation ACCE vulnerabilities. The connected bulletin confirms a cross-site scripting flaw in the Administration Console for Content Platform Engine (ACCE) that could allow an attacker to inject arbitrary JavaScript in the Web UI...

CentOS 8 : gd (CESA-2020:4659)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4659 advisory. - gd: NULL pointer dereference in gdImageClone CVE-2018-14553 - gd: Heap-based buffer overflow in gdImageColorMatch in gdcolormatch.c CVE-2019-6977 - g...

Ubuntu: Security Advisory (USN-4659-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 20.10 : Linux kernel regression (USN-4659-2)

The remote Ubuntu 20.10 host has packages installed that are affected by a vulnerability as referenced in the USN-4659-2 advisory. USN-4659-1 introduced a regression in the Linux kernel. Tenable has extracted the preceding description block directly from the Ubuntu security advisory. Note that...

Ubuntu 20.10 : Linux kernel vulnerabilities (USN-4659-1)

The remote Ubuntu 20.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4659-1 advisory. Several security issues were fixed in the Linux kernel. Tenable has extracted the preceding description block directly from the Ubuntu security advisory. Not...

Oracle Linux 8 : gd (ELSA-2020-4659)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4659 advisory. - Fix CVE-2018-14553 - Potential Null pointer dereference in gdImageClone Resolves: RHBZ1811788 - Fixed heap based buffer overflow in...

Debian: Security Advisory (DSA-4659-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-4659

Ansible before 1.5.5 sets 0644 permissions for sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by reading a file that uses the "deb http://user:pass@server:port/" format...

CVE-2014-4659

Ansible before 1.5.5 sets 0644 permissions for sources.list, which might allow local users to obtain sensitive credential information in opportunistic circumstances by reading a file that uses the "deb http://user:pass@server:port/" format...

CVE-2014-4659

CVE-2014-4659 affects Ansible before 1.5.5, where sources.list may be created with 0644 permissions. This could allow local users to read credential information embedded in apt sources (e.g., a file formatted as deb http://user:pass@server:port/). The connected documents confirm the vulnerability...