MINI-55C9-JGJM-4749

Bulletin has no description...

MINI-4749-M7PV-4W8F

Bulletin has no description...

CVE-2026-4749

creationtimestamp| type| source ---|---|--- 2026-03-24 07:39:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhs2zkqqvh2i...

CVE-2026-4749 NVD-CWE-noinfo in albfan miraclecast

NVD-CWE-noinfo vulnerability in albfan miraclecast.This issue affects miraclecast: before v1.0...

CVE-2026-4749

Technical details are not publicly available in the provided documents. Monitor for updates.

CGA-3VCX-HQJ5-4749

Bulletin has no description...

CVE-2022-4749

The Posts List Designer by Category WordPress plugin before 3.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used again...

CVE-2005-4749

HTTP request smuggling vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and 6.1 SP7 and earlier allows remote attackers to inject arbitrary HTTP headers via unspecified attack vectors...

CVE-2025-4749

creationtimestamp| type| source ---|---|--- 2025-05-16 05:34:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16630...

CVE-2022-4749

creationtimestamp| type| source ---|---|--- 2025-03-27 19:26:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9176...

AlmaLinux 9 : edk2 (ALSA-2024:4749)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:4749 advisory. EDK2: integer overflow in CreateHob could lead to HOB OOB R/W CVE-2022-36765 edk2: Predictable TCP Initial Sequence Numbers CVE-2023-45236 edk2: Use of a...

Oracle Linux 9 : edk2 (ELSA-2024-4749)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-4749 advisory. - edk2-NetworkPkg-SECURITY-PATCH-CVE-2023-45237.patch RHEL-40270 RHEL-40272 - edk2-NetworkPkg-TcpDxe-SECURITY-PATCH-CVE-2023-45236.patch RHEL-40270...

CVE-2024-4749

The wp-eMember WordPress plugin before 10.3.9 does not sanitize and escape the "fieldId" parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

CVE-2024-4749 WP eMember < 10.3.9 - Reflected XSS

The wp-eMember WordPress plugin before 10.3.9 does not sanitize and escape the "fieldId" parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting...

CVE-2024-4749

The wp-eMember WordPress plugin (versions prior to 10.3.9 ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape the "fieldId" parameter before it is outputted back onto the page. This flaw allows unauthenticated attackers to inject...

CVE-2018-4749

Rejected reason: This candidate is unused by its CNA...

CVE-2023-4749

CVE-2023-4749 affects SourceCodester Inventory Management System 1.0 (index.php). The vulnerability arises from manipulating the optional page argument to the file index.php, enabling file inclusion and remote access. Multiple sources corroborate a critical severity, with CVSS-derived scores indi...

CVE-2023-4749 SourceCodester Inventory Management System index.php file inclusion

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to file inclusion. It is possible to launch the attack remotely. The exploit has been...

SUSE CVE-2015-4749

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect availability via vectors related to JNDI...

CVE-2022-4749 Posts List Designer by Category < 3.2 - Contributor+ Stored XSS via Shortcode

The Posts List Designer by Category WordPress plugin before 3.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used again...