48 matches found
CGA-4847-3CW5-9CC4
Bulletin has no description...
CVE-2026-4847
creationtimestamp| type| source ---|---|--- 2026-03-26 09:54:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxdk5iwkr2d...
CVE-2026-4847
A vulnerability was found in dameng100 muucmf 1.9.5.20260309. The impacted element is an unknown function of the file /admin/config/list.html. Performing a manipulation of the argument Name results in cross site scripting. The attack can be initiated remotely. The exploit has been made public and...
CVE-2026-4847 dameng100 muucmf list.html cross site scripting
A vulnerability was found in dameng100 muucmf 1.9.5.20260309. The impacted element is an unknown function of the file /admin/config/list.html. Performing a manipulation of the argument Name results in cross site scripting. The attack can be initiated remotely. The exploit has been made public and...
CVE-2023-4847
A vulnerability classified as problematic has been found in SourceCodester Simple Book Catalog App 1.0. Affected is an unknown function of the component Update Book Form. The manipulation of the argument booktitle/bookauthor leads to cross site scripting. It is possible to launch the attack...
CGA-7XJ3-4847-MJX9
Bulletin has no description...
CVE-2025-4847
creationtimestamp| type| source ---|---|--- 2025-05-18 03:35:35+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpg4ueno6sb2 2025-05-18 05:08:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpgc2bymrq2t...
CVE-2025-4847 FreeFloat FTP Server MLS Command buffer overflow
A vulnerability has been found in FreeFloat FTP Server 1.0 and classified as critical. This vulnerability affects unknown code of the component MLS Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and ma...
CGA-4847-VWW5-7F48
Bulletin has no description...
CVE-2024-4847 Alt Text AI – Automatically generate image alt text for SEO and accessibility <= 1.4.9 - Authenticated (Subscriber+) SQL Injection
The Alt Text AI – Automatically generate image alt text for SEO and accessibility plugin for WordPress is vulnerable to generic SQL Injection via the ‘lastpostid’ parameter in all versions up to, and including, 1.4.9 due to insufficient escaping on the user supplied parameter and lack of sufficie...
CVE-2024-4847 Alt Text AI – Automatically generate image alt text for SEO and accessibility <= 1.4.9 - Authenticated (Subscriber+) SQL Injection
The Alt Text AI – Automatically generate image alt text for SEO and accessibility plugin for WordPress is vulnerable to generic SQL Injection via the ‘lastpostid’ parameter in all versions up to, and including, 1.4.9 due to insufficient escaping on the user supplied parameter and lack of sufficie...
WordPress Download Alt Text AI Plugin <= 1.4.9 is vulnerable to SQL Injection
Software Download Alt Text AI Type Plugin Vulnerable versions = 1.4.9 Fixed in 1.5.0 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2024-4847 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID 156a5d33530e Credits Lucio Sá Required privilege Subscriber...
CVE-2023-4847
creationtimestamp| type| source ---|---|--- 2023-09-09 12:27:08+00:00| seen| https://t.me/cibsecurity/70175...
CVE-2022-4847 Incorrectly Specified Destination in a Communication Channel in usememos/memos
Incorrectly Specified Destination in a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4847 Incorrectly Specified Destination in a Communication Channel in usememos/memos
Incorrectly Specified Destination in a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4847
CVE-2022-4847 affects usememos/memos prior to version 0.9.1, where an incorrectly specified destination in a communication channel exists. The available connected documents corroborate this issue across multiple sources (Red Hat, GHSA, OSV, and CVE listings). Impact details are limited in the pro...
CVE-2022-4847 Incorrectly Specified Destination in a Communication Channel in usememos/memos
Incorrectly Specified Destination in a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...
MSC-2022-4847
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...