Lucene search
+L

17 matches found

OSV
OSV
added 2026/09/04 10:17 p.m.11 views

DEBIAN-CVE-2026-46636

Twig is a template language for PHP. From version 1.0.0 to before version 3.27.0, SecurityPolicy::checkMethodAllowed unconditionally whitelists all method calls on instances of Twig\Markup. Twig\Markup is not final, so subclasses inherit the bypass. An application that passes an object of a...

8.7CVSS5.4AI score0.00358EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/29 12:00 a.m.13 views

UBUNTU-CVE-2026-46636

Unknown description...

8.7CVSS5.8AI score0.00358EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/05/28 12:00 a.m.25 views

Linux Distros Unpatched Vulnerability : CVE-2026-46636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Twig is a template language for PHP. From version 1.0.0 to before version 3.27.0, SecurityPolicy::checkMethodAllowed unconditionally whitelists all method calls...

8.7CVSS5.5AI score0.00358EPSS
SaveExploits0References3
Circl
Circl
added 2026/05/27 1:21 p.m.21 views

CVE-2026-46636

creationtimestamp| type| source ---|---|--- 2026-05-27 13:21:43+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmtlz35moz2y 2026-09-04 22:44:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dv5dn2j6bup6q...

8.7CVSS5.8AI score0.00358EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/04/28 6:35 p.m.8 views

CVE-2024-46636

NASA Earth Observing System Data and Information System EOSDIS MODAPS v8.1 was discovered to contain a SQL injection vulnerability in the category parameter...

9.4CVSS5.6AI score0.00331EPSS
SaveExploits1References1
Circl
Circl
added 2026/04/22 11:00 a.m.14 views

CVE-2024-46636

creationtimestamp| type| source ---|---|--- 2026-04-22 11:00:11+00:00| published-proof-of-concept| Telegram/s-aEaA57pf2NB0HZPPLWHP4Yhw-dX3wmzrDGItJzVg73M 2026-04-22 15:00:07+00:00| published-proof-of-concept| Telegram/UcOXFA8nSOttq6tnEv5GYCOJTlyoQN894TbAmd-Usu-nlPU...

9.4CVSS4.8AI score0.00331EPSS
SaveExploits1
NVD
NVD
added 2025/12/09 6:15 p.m.12 views

CVE-2025-46636

Dell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...

6.6CVSS0.00092EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/09 5:34 p.m.4 views

CVE-2025-46636

Dell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...

6.6CVSS6AI score0.00092EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/13 1:15 a.m.30 views

CVE-2023-46636

Cross-Site Request Forgery CSRF vulnerability in David Stöckl Custom Header Images plugin = 1.2.1 versions...

8.8CVSS0.00254EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/11/13 12:20 a.m.47 views

CVE-2023-46636 WordPress Custom Header Images Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in David Stöckl Custom Header Images plugin = 1.2.1 versions...

5.4CVSS9.1AI score0.00254EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/11/13 12:20 a.m.19 views

CVE-2023-46636 WordPress Custom Header Images Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in David Stöckl Custom Header Images plugin = 1.2.1 versions...

5.4CVSS7AI score0.00254EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/13 12:20 a.m.118 views

CVE-2023-46636

CVE-2023-46636 describes a CSRF vulnerability in the WordPress plugin Custom Header Images (versions

8.8CVSS7AI score0.00254EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/11/13 12:20 a.m.29 views

CVE-2023-46636 WordPress Custom Header Images Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in David Stöckl Custom Header Images plugin = 1.2.1 versions...

5.4CVSS7.2AI score
SaveExploits0References4
Patchstack
Patchstack
added 2023/10/25 12:00 a.m.26 views

WordPress Custom Header Images Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Custom Header Images Type Plugin Vulnerable versions = 1.2.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-46636 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID d852d829fc53 Credits Nguyen Xuan Chie...

8.8CVSS6.6AI score0.00254EPSS
SaveExploits0References1Affected Software1
Circl
Circl
added 2022/02/18 10:37 p.m.12 views

CVE-2021-46636

creationtimestamp| type| source ---|---|--- 2022-02-18 22:37:55+00:00| seen| https://t.me/cibsecurity/37749...

7.8CVSS7.5AI score0.01981EPSS
SaveExploits0References1
CVE
CVE
added 2022/02/18 7:46 p.m.112 views

CVE-2021-46636

Bentley MicroStation CONNECT 10.16.0.80 contains a DGN file parsing buffer-overread flaw that can allow remote code execution. Attacker must entice a user to open a malicious page/file; code runs in the target process. References: ZDI-22-223, BE-2021-0009. No patch/version details provided.

7.8CVSS7.8AI score0.01981EPSS
SaveExploits0References2Affected Software3
CNVD
CNVD
added 2020/05/14 12:00 a.m.43 views

Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2020-46636)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Kernel is one of the Windows system kernels. An elevation of privilege vulnerabili...

7.8CVSS7AI score0.00814EPSS
SaveExploits0References1
Rows per page
Query Builder