PT-2026-102271

ghsa-cphf-4846-3xx9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZE95752 Security fixes in strimzi-kafka-operator 0.50.0-r0

Package strimzi-kafka-operator version 0.50.0-r0 fixes 1 vulnerabilities: ghsa-cphf-4846-3xx9...

ECHO-4846-4782-00C1

Bulletin has no description...

MINI-4846-MP2F-HMRR

Bulletin has no description...

MINI-P6QR-4846-2XH3

Bulletin has no description...

CVE-2026-4846

creationtimestamp| type| source ---|---|--- 2026-03-26 09:34:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxcgdp6av27...

CVE-2026-4846

A vulnerability has been found in dameng100 muucmf 1.9.5.20260309. The affected element is an unknown function of the file channel/admin.Account/autoReply.html. Such manipulation of the argument keyword leads to cross site scripting. It is possible to launch the attack remotely. The exploit has...

GHSA-CPHF-4846-3XX9

creationtimestamp| type| source ---|---|--- 2026-01-24 21:24:27+00:00| seen| https://gist.github.com/alon710/eefdba86d78cf9d537d1f9c4b9b5bbb8 2026-01-24 22:30:55+00:00| seen| https://gist.github.com/alon710/a0444330b8b18e01bcd1d36bc2783bd6 2026-01-24 22:30:58+00:00| seen|...

GHSA-CPHF-4846-3XX9 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator, knative-kafka-broker-fips, wildfly, spark, keycloak, druid, apicurio-registry, kafka-bridge-fips, spark-fips, keycloak-fips, kafka-bridge, knative-kafka-broker...

CVE-2024-4846

Authentication bypass in the 2FA feature in Devolutions Server 2024.1.14.0 and earlier allows an authenticated attacker to authenticate to another user without being asked for the 2FA via another browser tab...

CVE-2025-4846

creationtimestamp| type| source ---|---|--- 2025-05-18 01:33:41+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpfw2hliboo2 2025-05-18 05:08:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpgc2c4ipq2e...

CVE-2025-4846

CVE-2025-4846 concerns FreeFloat FTP Server 1.0, where the vulnerability is in the MPUT Command Handler . The issue is a buffer overflow triggered by improper input length validation, with the potential to be exploited remotely. Public exploitation details have been disclosed. Several connected s...

CVE-2025-4846 FreeFloat FTP Server MPUT Command buffer overflow

A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. This affects an unknown part of the component MPUT Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and...

CVE-2025-4846 FreeFloat FTP Server MPUT Command buffer overflow

A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. This affects an unknown part of the component MPUT Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and...

CVE-2024-4846

The Devolutions Server (version 2024.1.14.0 and earlier) is susceptible to an authentication bypass within its 2FA feature . An authenticated attacker can exploit this vulnerability by using another browser tab to authenticate as a different user without being prompted for the required two-factor...

CVE-2023-4846

creationtimestamp| type| source ---|---|--- 2023-09-10 09:58:50+00:00| seen| https://t.me/cibsecurity/70173 2025-06-25 14:51:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19461...

CVE-2023-4846

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been rated as critical. This issue affects some unknown processing of the file deletemember.php. The manipulation of the argument memid leads to sql injection. The attack may be initiated remotely. The exploit has be...

CVE-2023-4846

CVE-2023-4846 affects SourceCodester Simple Membership System 1.0. The vulnerability is a SQL injection in the file delete_member.php, caused by manipulating the mem_id argument. It can be exploited remotely and has been publicly disclosed. Multiple sources describe this as a critical issue with ...

CVE-2023-4846 SourceCodester Simple Membership System delete_member.php sql injection

A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been rated as critical. This issue affects some unknown processing of the file deletemember.php. The manipulation of the argument memid leads to sql injection. The attack may be initiated remotely. The exploit has be...

CVE-2022-4846

creationtimestamp| type| source ---|---|--- 2022-12-29 20:13:18+00:00| seen| https://t.me/cibsecurity/55531 2025-04-10 16:49:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11273...