Lucene search
+L

90 matches found

OSV
OSV
added last week5 views

MINI-55C9-JGJM-4749

Bulletin has no description...

6.1CVSS4.2AI score0.00223EPSS
SaveExploits0
OSV
OSV
added 2026/06/16 10:13 p.m.6 views

MINI-4749-M7PV-4W8F

Bulletin has no description...

8.2CVSS5AI score0.00664EPSS
SaveExploits1
Circl
Circl
added 2026/03/24 7:39 a.m.9 views

CVE-2026-4749

creationtimestamp| type| source ---|---|--- 2026-03-24 07:39:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhs2zkqqvh2i...

6.5CVSS5.8AI score0.00244EPSS
SaveExploits0References1
CVE
CVE
added 2026/03/24 5:35 a.m.12 views

CVE-2026-4749

Technical details are not publicly available in the provided documents. Monitor for updates.

6.5CVSS5.8AI score0.00244EPSS
SaveExploits0References1
OSV
OSV
added 2026/03/24 5:35 a.m.4 views

CVE-2026-4749 NVD-CWE-noinfo in albfan miraclecast

NVD-CWE-noinfo vulnerability in albfan miraclecast.This issue affects miraclecast: before v1.0...

6.5CVSS5.9AI score0.00244EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 12:25 a.m.8 views

CVE-2022-4749

The Posts List Designer by Category WordPress plugin before 3.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used again...

5.4CVSS5.9AI score0.00471EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:47 p.m.10 views

CVE-2005-4749

HTTP request smuggling vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier allows remote attackers to inject arbitrary HTTP headers via unspecified attack vectors...

5CVSS7.2AI score0.01897EPSS
SaveExploits0References1
Circl
Circl
added 2025/05/16 5:34 a.m.11 views

CVE-2025-4749

creationtimestamp| type| source ---|---|--- 2025-05-16 05:34:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16630...

8.7CVSS4.8AI score0.01229EPSS
SaveExploits1References1
Circl
Circl
added 2025/03/27 7:26 p.m.6 views

CVE-2022-4749

creationtimestamp| type| source ---|---|--- 2025-03-27 19:26:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9176...

5.4CVSS5.5AI score0.00471EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
added 2024/07/25 12:0 a.m.37 views

AlmaLinux 9 : edk2 (ALSA-2024:4749)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:4749 advisory. EDK2: integer overflow in CreateHob could lead to HOB OOB R/W CVE-2022-36765 edk2: Predictable TCP Initial Sequence Numbers CVE-2023-45236 edk2: Use of a...

7.8CVSS7.7AI score0.00994EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2024/07/24 12:0 a.m.34 views

Oracle Linux 9 : edk2 (ELSA-2024-4749)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-4749 advisory. - edk2-NetworkPkg-SECURITY-PATCH-CVE-2023-45237.patch RHEL-40270 RHEL-40272 - edk2-NetworkPkg-TcpDxe-SECURITY-PATCH-CVE-2023-45236.patch RHEL-40270...

7.8CVSS7.7AI score0.00994EPSS
SaveExploits0References4
NVD
NVD
added 2024/06/04 6:15 a.m.13 views

CVE-2024-4749

The wp-eMember WordPress plugin before 10.3.9 does not sanitize and escape the "fieldId" parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

8.3CVSS9.2AI score0.0044EPSS
SaveExploits2References1
Cvelist
Cvelist
added 2024/06/04 6:0 a.m.33 views

CVE-2024-4749 WP eMember < 10.3.9 - Reflected XSS

The wp-eMember WordPress plugin before 10.3.9 does not sanitize and escape the "fieldId" parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

9.2AI score0.0044EPSS
SaveExploits2References1
CVE
CVE
added 2024/06/04 6:0 a.m.43 views

CVE-2024-4749

The CVE-2024-4749 entry concerns the WP eMember WordPress plugin (versions before 10.3.9). The vulnerability is a Reflected XSS due to the fieldId parameter not being sanitized/escaped before echo, potentially enabling script injection in output pages. Public details confirm affected software and...

8.3CVSS8.7AI score0.0044EPSS
SaveExploits2References1Affected Software1
NVD
NVD
added 2023/09/14 7:16 p.m.10 views

CVE-2018-4749

Rejected reason: This candidate is unused by its CNA...

6.6AI score
SaveExploits0
CVE
CVE
added 2023/09/04 12:31 a.m.43 views

CVE-2023-4749

CVE-2023-4749 affects SourceCodester Inventory Management System 1.0 (index.php). The vulnerability arises from manipulating the optional page argument to the file index.php, enabling file inclusion and remote access. Multiple sources corroborate a critical severity, with CVSS-derived scores indi...

9.8CVSS7.2AI score0.00863EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/04 12:31 a.m.16 views

CVE-2023-4749 SourceCodester Inventory Management System index.php file inclusion

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to file inclusion. It is possible to launch the attack remotely. The exploit has been...

6.5CVSS7.2AI score0.00863EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:17 a.m.6 views

SUSE CVE-2015-4749

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect availability via vectors related to JNDI...

4.3CVSS8.9AI score0.03316EPSS
SaveExploits0References15
Cvelist
Cvelist
added 2023/01/30 8:31 p.m.29 views

CVE-2022-4749 Posts List Designer by Category < 3.2 - Contributor+ Stored XSS via Shortcode

The Posts List Designer by Category WordPress plugin before 3.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used again...

5.5AI score0.00471EPSS
SaveExploits2References1
CVE
CVE
added 2023/01/30 8:31 p.m.58 views

CVE-2022-4749

CVE-2022-4749 affects the WordPress plugin Posts List Designer by Category, with versions prior to 3.2 exposing a Stored XSS risk. The vulnerability stems from insufficient validation/escaping of shortcode attributes, allowing a contributor-level attacker to inject malicious content that could af...

5.4CVSS5.3AI score0.00471EPSS
SaveExploits2References1Affected Software1
Rows per page
Query Builder