44 matches found
CVE-2026-4672 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
CVE-2026-4672 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce-fips, gitlab-cng-fips, gitlab-runner-fips, gitlab-cng, gitlab-runner, gitlab-rails-ce-fips, gitlab-workhorse-ce, gitlab-rails-ce...
GitLab 18.4 < 19.0.5 / 19.1 < 19.1.3 / 19.2 < 19.2.1 (CVE-2026-4672)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an...
CVE-2026-4672
creationtimestamp| type| source ---|---|--- 2026-07-29 20:49:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrssgmegbl2i 2026-07-30 04:45:40+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260730 2026-07-30 14:15:31+00:00| seen|...
RHEL 8 : container-tools:rhel8 (RHSA-2026:4672)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:4672 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: golang:...
WordPress Offsprout Page Builder plugin 2.2.1-2.15.2 - Authenticated (Contributor+) Privilege Escalation via permission_callback Function
Authenticated Contributor+ Privilege Escalation via permissioncallback Function vulnerability discovered by kr0d in WordPress Plugin Offsprout Page Builder versions 2.2.1-2.15.2...
RHEL 9 : containernetworking-plugins (RHSA-2024:4672)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:4672 advisory. The Container Network Interface CNI project consists of a specification and libraries for writing plug- ins for configuring network interfaces in Lin...
CGA-4672-RR8G-34R5
Bulletin has no description...
CVE-2024-4672
A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view/showstudentsubject.php. The manipulation of the argument id leads to cross site scripting. The attack can ...
CVE-2024-4672 Campcodes Complete Web-Based School Management System show_student_subject.php cross site scripting
A vulnerability classified as problematic was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view/showstudentsubject.php. The manipulation of the argument id leads to cross site scripting. The attack can ...
openSUSE: Security Advisory for suse (SUSE-SU-2023:4672-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-4672
creationtimestamp| type| source ---|---|--- 2023-12-28 11:26:38+00:00| seen| https://t.me/ctinow/159998...
CVE-2023-4672
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Talent Software ECOP allows Reflected XSS. This issue affects ECOP: before 32255...
CVE-2023-4672
CVE-2023-4672 describes an Improper Neutralization of Input During Web Page Generation (XSS) in Talent Software ECOP disclosed as a reflected XSS affecting ECOP: before 32255. Supporting sources (NVD/NIST, CVE listings) consistently attribute the issue to input handling during web page generation...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : suse-build-key (SUSE-SU-2023:4672-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:4672-1 advisory. This update runs a import-suse-build-key script. The previous libzypp-post-script based installation is...
CVE-2018-4672
Rejected reason: This candidate is unused by its CNA...
CVE-2022-4672
creationtimestamp| type| source ---|---|--- 2023-01-23 18:31:20+00:00| seen| https://t.me/cibsecurity/56859...
CVE-2022-4672 WordPress Simple Shopping Cart < 4.6.2 - Contributor+ Stored XSS via Shortcode
The WordPress Simple Shopping Cart WordPress plugin before 4.6.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used...
CVE-2022-4672
CVE-2022-4672 affects WordPress Simple Shopping Cart (plugin) versions prior to 4.6.2. The root cause is lack of validation and escaping of certain shortcode attributes before output, enabling Stored XSS from a user with as low as a contributor to target high-privilege admins. Public details show...