51 matches found
CVE-2022-27080
Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/setWorkmode...
CVE-2020-4856
IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190459...
CVE-2020-4856
CVE-2020-4856 is a stored cross-site scripting vulnerability in IBM Engineering products, notably IBM Engineering DOORS Next (and related ELN/LRM/RQM/EWM/RTC families). The Web UI can embed arbitrary JavaScript, potentially altering functionality and leading to credentials disclosure within a tru...
Debian: Security Advisory (DSA-4856-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-4856
This CVE entry is rejected/not used; it does not represent an active vulnerability.
CVE-2013-4856
creationtimestamp| type| source ---|---|--- 2019-10-25 20:32:44+00:00| seen| https://t.me/cibsecurity/7674 2024-01-27 13:46:13+00:00| seen| https://t.me/ctinow/174765...
CVE-2013-4856
D-Link DIR-865L has Information Disclosure...
CVE-2013-4856
Technical details about CVE-2013-4856 for D-Link DIR-865L are not publicly provided in the supplied documents. Monitor for updates from vendors and security feeds; current records only note information disclosure without specifics on affected versions, vectors, or fixes.
CVE-2013-4856
D-Link DIR-865L has Information Disclosure...
CVE-2018-4856
The CVE-2018-4856 issue affects Siemens SICLOCK TC100 and TC400 (All versions). Concretely, an attacker with administrative access to the device management interface can lock out legitimate users, requiring manual interaction to restore access. Some connected sources describe an authentication by...
CVE-2016-4856
Splunk Enterprise 6.3.x (pre-6.3.5) and Splunk Light 6.3.x (pre-6.3.5) are affected by a stored cross-site scripting (CWE-79) vulnerability that allows an administrator to inject arbitrary web script or HTML via unspecified vectors. The issue stems from incorrect handling in the web interface, en...
CVE-2016-4856
Cross-site scripting vulnerability in Splunk Enterprise 6.3.x prior to 6.3.5 and Splunk Light 6.3.x prior to 6.3.5 allows attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-4856
CVE-2008-4856 is rejected/not used and does not represent an active vulnerability entry.
Oracle VirtualBox Unspecified Vulnerability (Nov 2015) - Mac OS X
Oracle VirtualBox is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...
Oracle VirtualBox Unspecified Vulnerability (Nov 2015) - Windows
Oracle VirtualBox is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...
Oracle VirtualBox Unspecified Vulnerability (Nov 2015) - Linux
Oracle VirtualBox is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...
CVE-2015-4856
Oracle VM VirtualBox is affected by CVE-2015-4856: Unspecified Core subcomponent flaw allows local users to cause a denial of service in affected VirtualBox versions prior to 4.0.30, 4.1.38, 4.2.30, 4.3.26, and 5.0.0. Connected sources provide variant-specific listings (Nessus/OpenVAS) but do not...