17 matches found
DEBIAN-CVE-2026-46636
Twig is a template language for PHP. From version 1.0.0 to before version 3.27.0, SecurityPolicy::checkMethodAllowed unconditionally whitelists all method calls on instances of Twig\Markup. Twig\Markup is not final, so subclasses inherit the bypass. An application that passes an object of a...
UBUNTU-CVE-2026-46636
Unknown description...
Linux Distros Unpatched Vulnerability : CVE-2026-46636
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Twig is a template language for PHP. From version 1.0.0 to before version 3.27.0, SecurityPolicy::checkMethodAllowed unconditionally whitelists all method calls...
CVE-2026-46636
creationtimestamp| type| source ---|---|--- 2026-05-27 13:21:43+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmtlz35moz2y 2026-09-04 22:44:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dv5dn2j6bup6q...
CVE-2024-46636
NASA Earth Observing System Data and Information System EOSDIS MODAPS v8.1 was discovered to contain a SQL injection vulnerability in the category parameter...
CVE-2024-46636
creationtimestamp| type| source ---|---|--- 2026-04-22 11:00:11+00:00| published-proof-of-concept| Telegram/s-aEaA57pf2NB0HZPPLWHP4Yhw-dX3wmzrDGItJzVg73M 2026-04-22 15:00:07+00:00| published-proof-of-concept| Telegram/UcOXFA8nSOttq6tnEv5GYCOJTlyoQN894TbAmd-Usu-nlPU...
CVE-2025-46636
Dell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...
CVE-2025-46636
Dell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...
CVE-2023-46636
Cross-Site Request Forgery CSRF vulnerability in David Stöckl Custom Header Images plugin = 1.2.1 versions...
CVE-2023-46636 WordPress Custom Header Images Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in David Stöckl Custom Header Images plugin = 1.2.1 versions...
CVE-2023-46636 WordPress Custom Header Images Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in David Stöckl Custom Header Images plugin = 1.2.1 versions...
CVE-2023-46636
CVE-2023-46636 describes a CSRF vulnerability in the WordPress plugin Custom Header Images (versions
CVE-2023-46636 WordPress Custom Header Images Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in David Stöckl Custom Header Images plugin = 1.2.1 versions...
WordPress Custom Header Images Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)
Software Custom Header Images Type Plugin Vulnerable versions = 1.2.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-46636 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID d852d829fc53 Credits Nguyen Xuan Chie...
CVE-2021-46636
creationtimestamp| type| source ---|---|--- 2022-02-18 22:37:55+00:00| seen| https://t.me/cibsecurity/37749...
CVE-2021-46636
Bentley MicroStation CONNECT 10.16.0.80 contains a DGN file parsing buffer-overread flaw that can allow remote code execution. Attacker must entice a user to open a malicious page/file; code runs in the target process. References: ZDI-22-223, BE-2021-0009. No patch/version details provided.
Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2020-46636)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Kernel is one of the Windows system kernels. An elevation of privilege vulnerabili...