CVE-2025-4867

The CVE-2025-4867 entry concerns Tenda A15 (firmware version 15.13.07.13). The vulnerability lies in the function formArpNerworkSet within the file /goform/ArpNerworkSet, where manipulation leads to a denial of service. Exploitation can be remote and the exploit has been disclosed publicly. Multi...

RHEL 8 : Release of openshift-serverless-clients kn 1.33.1 security updatees (Moderate) (RHSA-2024:4867)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:4867 advisory. Red Hat OpenShift Serverless Client kn 1.33.1 provides a CLI to interact with Red Hat OpenShift Serverless 1.33.1. The kn CLI is delivered as an RPM...

CVE-2023-4867

Summary: CVE-2023-4867 affects Xintian Smart Table Integrated Management System 5.6.9, specifically the file /SysManage/AddUpdateSites.aspx (Added Site Page). The vulnerability arises from unsafe handling of the TbxSiteName parameter, enabling a SQL injection. It is exploitable remotely and, per ...

CVE-2022-4867 Cross-Site Request Forgery (CSRF) in froxlor/froxlor

Cross-Site Request Forgery CSRF in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

CVE-2022-4867

The CVE-2022-4867 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in froxlor/froxlor prior to version 2.0.0-beta1. Affected software is Froxlor (GitHub repository froxlor/froxlor). The underlying issue is CSRF in the application; exploitation details are not provided in the docu...

Debian: Security Advisory (DSA-4867-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4867-1 : grub2 - security update

Several vulnerabilities have been discovered in the GRUB2 bootloader. - CVE-2020-14372 It was discovered that the acpi command allows a privileged user to load crafted ACPI tables when Secure Boot is enabled. - CVE-2020-25632 A use-after-free vulnerability was found in the rmmod command. -...

CVE-2019-4867

...

CVE-2019-4867

CVE-2019-4867 entry is rejected/not used; this CVE ID does not represent an active vulnerability entry.

CVE-2013-4867

Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking...

CVE-2017-4867

CVE-2017-4867 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2017-4867

...

CVE-2016-4867

Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restriction to view unauthorized project information via the Project function...

CVE-2016-4867

Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restriction to view unauthorized project information via the Project function...

CVE-2016-4867

CVE-2016-4867 affects Cybozu Office 9.0.0 to 10.4.0. The vulnerability is an access restriction bypass in the Project function that allows remote authenticated users to view unauthorized project information. Impact includes viewing information in closed projects. Affected component is the Project...

CVE-2015-4867

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 allows remote attackers to affect integrity via unknown vectors related to Content Server, a different vulnerability than CVE-2015-4880...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 allows remote attackers to affect integrity via unknown vectors related to Content Server, a different vulnerability than CVE-2015-4867...

CVE-2015-4867

CVE-2015-4867 refers to an unspecified vulnerability in the Oracle WebCenter Content component (Content Server) of Oracle Fusion Middleware 10.1.3.5.1, allowing remote attackers to affect integrity via unknown vectors. This CVE is described as a different vulnerability from CVE-2015-4880. The con...

CVE-2014-4867

Cryoserver Security Appliance 7.3.x is affected by a privilege-escalation issue due to weak permissions on the /etc/init.d/cryoserver script. The default support account can modify this script and leverage /bin/cryo-mgmt to gain elevated privileges, potentially yielding root on the device. Techni...

GNUTurk mods.php t_id Parameter SQL Injection - Ver2 (CVE-2006-4867)

An SQL injection vulnerability has been reported in GNUTurk. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...