Lucene search
+L

98 matches found

Circl
Circl
added 2026/03/26 9:15 a.m.5 views

CVE-2026-4860

creationtimestamp| type| source ---|---|--- 2026-03-26 09:15:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxbdab5jt2i...

7.5CVSS7.1AI score0.00427EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/18 5:15 a.m.25 views

CVE-2025-4860

A vulnerability classified as problematic has been found in D-Link DAP-2695 120b36r137ALLen20210528. Affected is an unknown function of the file /advdhcps.php of the component Static Pool Settings Page. The manipulation of the argument fmac leads to cross site scripting. It is possible to launch...

4.8CVSS0.00596EPSS
SaveExploits1References5
CVE
CVE
added 2025/05/18 5:0 a.m.52 views

CVE-2025-4860

The CVE-2025-4860 entry concerns D-Link DAP-2695 (Static Pool Settings Page) where an input parameter f_mac in /adv_dhcps.php enables cross-site scripting. Multiple sources confirm a remote exploitation path and that affected devices are no longer maintained by the vendor. Public disclosures exis...

4.8CVSS6.4AI score0.00596EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/05/18 5:0 a.m.38 views

CVE-2025-4860 D-Link DAP-2695 Static Pool Settings Page adv_dhcps.php cross site scripting

A vulnerability classified as problematic has been found in D-Link DAP-2695 120b36r137ALLen20210528. Affected is an unknown function of the file /advdhcps.php of the component Static Pool Settings Page. The manipulation of the argument fmac leads to cross site scripting. It is possible to launch...

4.8CVSS0.00596EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/05/18 5:0 a.m.13 views

CVE-2025-4860 D-Link DAP-2695 Static Pool Settings Page adv_dhcps.php cross site scripting

A vulnerability classified as problematic has been found in D-Link DAP-2695 120b36r137ALLen20210528. Affected is an unknown function of the file /advdhcps.php of the component Static Pool Settings Page. The manipulation of the argument fmac leads to cross site scripting. It is possible to launch...

4.8CVSS3.5AI score0.00596EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/09/16 12:0 a.m.7 views

D-Link DIR-X4860 操作系统命令注入漏洞

The DIR-X4860 is a wireless router from China's AUO D-Link. AUO DIR-X4860 suffers from an operating system command injection vulnerability that originates from a failure to properly validate user input in the telnet service, which can be exploited by an unauthenticated, remote attacker to log int...

9.8CVSS7.7AI score0.01139EPSS
SaveExploits0References3
OSV
OSV
added 2024/07/16 11:15 p.m.2 views

DEBIAN-CVE-2023-4860

Inappropriate implementation in Skia in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS8.4AI score0.00369EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/16 10:30 p.m.98 views

CVE-2023-4860

CVE-2023-4860 affects Google Chrome (Skia) via an inappropriate Skia implementation in Chromium before 115.0.5790.98, allowing a remote attacker who has compromised the renderer process to potentially escape the sandbox by crafting an HTML page. The vulnerability is rooted in the Skia component a...

9.6CVSS6.5AI score0.00369EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/04/28 12:0 a.m.37 views

RHEL 8 : Release of OpenShift Serverless Client kn 1.22.1 (Moderate) (RHSA-2022:4860)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:4860 advisory. The Red Hat OpenShift Serverless Client kn 1.22.1 provides a CLI to interact with Red Hat OpenShift Serverless 1.22.1. The kn CLI is deliver...

9.1CVSS8.2AI score0.03015EPSS
SaveExploits0References14
Tenable Nessus
Tenable Nessus
added 2023/04/11 12:0 a.m.20 views

Siemens SCALANCE M875 Arbitrary OS Command Execution (CVE-2018-4860)

A vulnerability has been identified in SCALANCE M875 All versions. An authenticated remote attacker with access to the web interface 443/tcp, could execute arbitrary operating system commands. Successful exploitation requires that the attacker has network access to the web interface. The attacker...

9CVSS7.7AI score0.03737EPSS
SaveExploits0References2
CVE
CVE
added 2022/12/30 11:49 a.m.86 views

CVE-2022-4860

CVE-2022-4860 affects KBase Metrics. Concrete details across connected records show a SQL injection in the function upload_user_data (file src/daily_cron_jobs/methods_upload_user_stats.py). The issue arises from how user data is uploaded, enabling injection under certain inputs. The patch 959dfb6...

9.8CVSS7.9AI score0.00604EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/02/07 12:0 a.m.23 views

Schneider Electric Quantum Ethernet Module Improper Authentication (CVE-2011-4860)

The ComputePassword function in the Schneider Electric Quantum Ethernet Module on the NOE 771 device aka the Quantum 140NOE771 module generates the password for the fwupgrade account by performing a calculation on the MAC address, which makes it easier for remote attackers to obtain access via a ...

10CVSS5.8AI score0.02756EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.31 views

SUSE: Security Advisory (SUSE-SU-2015:2216-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.3AI score0.98685EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.32 views

SUSE: Security Advisory (SUSE-SU-2015:2192-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.9AI score0.98685EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2021/04/21 12:0 a.m.28 views

CentOS: Security Advisory for java (CESA-2015:2086)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

10CVSS7.4AI score0.09991EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.41 views

SUSE: Security Advisory (SUSE-SU-2015:1874-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.1AI score0.09991EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.29 views

SUSE: Security Advisory (SUSE-SU-2015:1874-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.1AI score0.09991EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.37 views

SUSE: Security Advisory (SUSE-SU-2015:2268-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.8AI score0.13354EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.29 views

SUSE: Security Advisory (SUSE-SU-2015:2168-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.3AI score0.98685EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.30 views

SUSE: Security Advisory (SUSE-SU-2015:2168-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.3AI score0.98685EPSS
SaveExploits0References7
Rows per page
Query Builder