CVE-2026-4786

creationtimestamp| type| source ---|---|--- 2026-04-13 22:36:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mjfwhyhvn62e 2026-04-13 23:21:32+00:00| published-proof-of-concept| Telegram/DNd18EV1mvoOjDBqQat4zOgBzw-F-OvAJ7pAjcWk8VU 2026-04-14 01:20:57+00:00| seen|...

CVE-2026-4786

Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open" API could have commands injected into the underlying shell. See CVE-2026-4519 for details...

UBUNTU-CVE-2026-4786

Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open" API could have commands injected into the underlying shell. See CVE-2026-4519 for details...

CVE-2024-4786

An improper validation vulnerability was reported in the Lenovo Tab K10 that could allow a specially crafted application to keep the device on...

CVE-2022-4786

The Video.js WordPress plugin through 4.5.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2011-4786

A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and CVE-2011-4787...

CVE-2010-4786

IBM Tivoli Directory Server TDS 6.0 before 6.0.0.63 aka 6.0.0.8-TIV-ITDS-IF0005 allows remote authenticated users to cause a denial of service daemon crash or hang via a paged search, as demonstrated by a certain idsldapsearch command, related to an improper ibm-slapdIdleTimeOut configuration...

CVE-2025-4786

creationtimestamp| type| source ---|---|--- 2025-05-16 16:34:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16696...

CVE-2025-4786

A vulnerability was found in SourceCodester/oretnom23 Stock Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/?page=return/viewreturn. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely...

CVE-2025-4786

CVE-2025-4786 affects SourceCodester/oretnom23 Stock Management System 1.0. The issue is an SQL injection in the endpoint /admin/?page=return/view_return triggered by manipulating the ID parameter, with remote exploitation possible. Public disclosure exists and the vulnerability is classified as ...

CVE-2025-4786 SourceCodester/oretnom23 Stock Management System view_return sql injection

A vulnerability was found in SourceCodester/oretnom23 Stock Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/?page=return/viewreturn. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely...

CVE-2025-4786 SourceCodester/oretnom23 Stock Management System view_return sql injection

A vulnerability was found in SourceCodester/oretnom23 Stock Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/?page=return/viewreturn. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely...

CVE-2024-4786

creationtimestamp| type| source ---|---|--- 2024-07-26 23:03:20+00:00| seen| https://t.me/cvedetector/1715...

Lenovo Tab K10 Vulnerability - Lenovo Support US

No description provided...

CGA-GCRF-4786-HWR8

Bulletin has no description...

Ubuntu 16.04 ESM : Moment.js vulnerabilities (USN-4786-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4786-1 advisory. It was discovered that Moment.js mishandled certain regular expressions. An attacker could use this vulnerability to cause a denial of service. Tenable h...

CVE-2018-4786

creationtimestamp| type| source ---|---|--- 2023-09-14 22:40:49+00:00| seen| https://t.me/cibsecurity/70525...

CVE-2018-4786

Rejected reason: This candidate is unused by its CNA...

CVE-2022-4786

creationtimestamp| type| source ---|---|--- 2023-02-21 12:16:36+00:00| seen| https://t.me/cibsecurity/58564...

CVE-2022-4786 Video.js - HTML5 Video Player for WordPress <= 4.5.0 - Contributor+ Stored XSS via Shortcode

The Video.js WordPress plugin through 4.5.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...