54 matches found
MINI-5C4W-6R3X-4663
Bulletin has no description...
CVE-2026-4663
creationtimestamp| type| source ---|---|--- 2026-05-12 23:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlox6jegzl2s...
CVE-2026-4663
The CVE-2026-4663 entry is linked to the WordPress payment plugin issue described by EUVD-2026-29394: the iPOSpays Gateways WC plugin for WordPress has a Missing Authorization vulnerability up to version 1.3.7. The root cause is a REST API endpoint exposed at /wp-json/ipospays/v1/save_settings wh...
MINI-4663-HGV9-9P9R
Bulletin has no description...
MINI-4XFR-4663-4536
Bulletin has no description...
CVE-2025-4663
creationtimestamp| type| source ---|---|--- 2025-07-08 18:16:34+00:00| seen| Telegram/xvJ0nm8kAySasnE4IS1nozIJK8-iqMVzd1BRmLAGEDQ-yU...
CVE-2010-4663
Unspecified vulnerability in the News module in CMS Made Simple CMSMS before 1.9.1 has unknown impact and attack vectors...
CVE-2024-4663 OSM Map Widget for Elementor <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
The OSM Map Widget for Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2019-4663
creationtimestamp| type| source ---|---|--- 2024-03-09 13:07:20+00:00| seen| https://t.me/ctinow/203924...
CVE-2023-4663 XSS in Saphira Connect
Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Saphira Saphira Connect allows Reflected XSS. This issue affects Saphira Connect: before 9...
CVE-2023-4663
CVE-2023-4663 concerns a reflected XSS vulnerability in Saphira Connect prior to version 9. The issue is caused by improper neutralization of script-related HTML tags in web pages, enabling potential script execution in a user browser when interacting with affected pages. The CVSS data (AV:N/AC:L...
CVE-2022-4663
creationtimestamp| type| source ---|---|--- 2023-01-03 16:17:09+00:00| seen| https://t.me/cibsecurity/55801...
CVE-2022-4663 Members Import <= 1.4.2 - Self Cross-Site Scripting
The Members Import plugin for WordPress is vulnerable to Self Cross-Site Scripting via the userlogin parameter in an imported CSV file in versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web...
CVE-2022-4663
CVE-2022-4663 affects the WordPress Members Import plugin (versions
WordPress Members Import Plugin <= 1.4.2 is vulnerable to Cross Site Scripting (XSS)
Software Members Import Type Plugin Vulnerable versions = 1.4.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4663 Patch priority Low CVSS severity Low 4.4 Developer Claim ownership PSID d4d45be3e61f Credits Saeed Alzahrani Required...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server Liberty shipped with IBM Digital Business Automation Workflow family products (CVE-2019-4663)
Summary WebSphere Application Server Liberty is shipped as a component of IBM Business Automation Workflow and IBM Business Process Manager Process Federation Server since 8.5.6 and User Management Service since 18.0.0.1. Information about a security vulnerability affecting IBM WebSphere...
Security Bulletin: WebSphere Application Server Liberty vulnerabilities affect IBM Spectrum Control (formerly Tivoli Storage Productivity Center) (CVE-2019-4663 and CVE-2019-4720)
Summary Security vulnerabilities in IBM WebSphere Application Server Liberty affect IBM Spectrum Control formerly Tivoli Storage Productivity Center. IBM Spectrum Control has addressed the following CVEs. Vulnerability Details CVEID: CVE-2019-4720 DESCRIPTION: IBM WebSphere Application Server 7.0...
Ubuntu 20.04 LTS : GDK-PixBuf vulnerability (USN-4663-1)
The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4663-1 advisory. Melvin Kool discovered that the GDK-PixBuf library did not properly handle certain GIF images. If an user or automated system were tricked into opening a speciall...
Security Bulletin: Cross-site Scripting Vulnerability in Websphere Application Server liberty bundled with IBM Cloud Pak System (CVE-2019-4663)
Summary Vulnerability has been identified in the Websphere Liberty AdminCenter in WebSphere Application Server Liberty bundled with Cloud Pak System CVE-2019-4663 . Cloud Pak System has released v2.3.2.0 with supports WebSphere Application Server Liberty 19.0.0.12. Information about vulnerability...
Debian DSA-4663-1 : python-reportlab - security update
It was discovered that python-reportlab, a Python library to create PDF documents, is prone to a code injection vulnerability while parsing a color attribute. An attacker can take advantage of this flaw to execute arbitrary code if a specially crafted document is processed. C Tenable Network...