MINI-46MV-9PQV-4746

Bulletin has no description...

CVE-2026-4746

creationtimestamp| type| source ---|---|--- 2026-03-24 06:00:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116282623934878762 2026-03-24 06:00:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mhrvjbg2wq2i 2026-03-24 06:43:16+00:00| seen|...

CVE-2026-4746

CVE-2026-4746 describes an out-of-bounds write (heap buffer over-write) in timeplus-io/proton, specifically within base/poco/Foundation/src modules and the inflate.C file. Affected version range is proton before 1.6.16. The CVSS metrics indicate a critical, network-accessible vulnerability with h...

CVE-2024-4746

Missing Authorization vulnerability in netgsm Netgsm netgsm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Netgsm: from n/a through = 2.9.32...

CVE-2022-4746

The FluentAuth WordPress plugin before 1.0.2 prioritizes getting a visitor's IP address from certain HTTP headers over PHP's REMOTEADDR, which makes it possible to bypass the IP-based blocks set by the plugin...

CVE-2013-4746

Cross-site scripting XSS vulnerability in the My quiz and poll myquizpoll extension before 2.0.6 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-4746

The billing system for Parallels Plesk Panel 10.3.1build1013110726.09 does not disable the SSL 2.0 protocol, which makes it easier for remote attackers to conduct spoofing attacks by leveraging protocol weaknesses...

CVE-2025-4746

creationtimestamp| type| source ---|---|--- 2025-05-16 05:34:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16633...

CVE-2025-4746 Campcodes Sales and Inventory System purchase_delete.php sql injection

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/purchasedelete.php. The manipulation of the argument prid leads to sql injection. The attack can be initiated remotely. The exploit has...

CVE-2025-4746 Campcodes Sales and Inventory System purchase_delete.php sql injection

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/purchasedelete.php. The manipulation of the argument prid leads to sql injection. The attack can be initiated remotely. The exploit has...

CVE-2025-4746

CVE-2025-4746 affects Campcodes Sales and Inventory System v1.0. The vulnerability is in /pages/purchase_delete.php where unsafely using the pr_id parameter enables remote SQL injection, potentially exposing database data. Public exploitation is noted in some sources. No patch/version fix is desc...

CGA-3VQP-VCM5-4746

Bulletin has no description...

CVE-2024-4746

Missing Authorization vulnerability in netgsm Netgsm netgsm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Netgsm: from n/a through = 2.9.32...

CVE-2024-4746

CVE-2024-4746 is a WordPress Netgsm plugin vulnerability (versions

WordPress Netgsm Plugin <= 2.9.32 is vulnerable to Broken Access Control

Software Netgsm Type Plugin Vulnerable versions = 2.9.32 Fixed in 2.9.33 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-4746 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 07b1b0c3155d Credits Dhabaleshwar Das Required privilege...

CVE-2018-4746

Rejected reason: This candidate is unused by its CNA...

CVE-2023-4746

creationtimestamp| type| source ---|---|--- 2023-09-04 07:21:58+00:00| seen| https://t.me/cibsecurity/69735...

CVE-2023-4746

A vulnerability classified as critical has been found in TOTOLINK N200RE V5 9.3.5u.6437B20230519. This affects the function Validitycheck. The manipulation leads to format string. It is possible to initiate the attack remotely. The root-cause of the vulnerability is a format string issue. But the...

CVE-2023-4746

A vulnerability classified as critical has been found in TOTOLINK N200RE V5 9.3.5u.6437B20230519. This affects the function Validitycheck. The manipulation leads to format string. It is possible to initiate the attack remotely. The root-cause of the vulnerability is a format string issue. But the...

CVE-2023-4746

CVE-2023-4746 affects TOTOLINK N200RE V5 firmware 9.3.5u.6437_B20230519. The root cause is a format string vulnerability in the function Validity_check that allows bypassing validation and leads to OS command injection. Impact is remote, with high severity (attack vector: network, no user interac...