Fedora 42 : polkit (2026-1774635f74)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1774635f74 advisory. CVE-2026-4897 aisle.com fix of unsanitized getline Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

SUSE-SU-2026:21032-1 Security update for polkit

This update for polkit fixes the following issue: - CVE-2026-4897: Fixed possible OOM condition via specially crafted input to polkit-agent-helper-1 bsc1260859...

Mageia: Security Advisory (MGASA-2026-0085)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OESA-2026-1814 polkit security update

polkit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes. Security Fixes: A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the...

Fedora: Security Advisory (FEDORA-2026-387a47c82b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libpolkit-agent-1-0-127-3.1 on GA media (moderate)

libpolkit-agent-1-0-127-3.1 on GA media Announcement ID: openSUSE-SU-2026:10453-1 Rating: moderate Cross-References: CVE-2025-7519 CVE-2026-4897 CVSS scores: CVE-2025-7519 SUSE : 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2025-7519 SUSE : 7.1...

Fedora 44 : polkit (2026-054c0e22d1)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-054c0e22d1 advisory. CVE-2026-4897 aisle.com fix of unsanitized getline Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

CVE-2026-4897

creationtimestamp| type| source ---|---|--- 2026-03-26 17:47:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhy5xpk5qr25 2026-03-29 11:48:45+00:00| seen| https://bsky.app/profile/concisecyber.bsky.social/post/3mi73cjshg52r 2026-04-09 12:45:08+00:00| seen|...

DEBIAN-CVE-2026-4897

A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the polkit-agent-helper-1 setuid binary via standard input stdin. This unbounded input can lead to an out-of-memory OOM condition, resulting in a Denial of Service DoS for the...

EUVD-2014-4897

Malware in sbrugna...

CVE-2024-4897

parisneo/lollms-webui, in its latest version, is vulnerable to remote code execution due to an insecure dependency on llama-cpp-python version llamacpppython-0.2.61+cpuavx2-cp311-cp311-manylinux231x8664. The vulnerability arises from the application's 'bindingzoo' feature, which allows attackers ...

CVE-2024-4897 Remote Code Execution in parisneo/lollms-webui

parisneo/lollms-webui, in its latest version, is vulnerable to remote code execution due to an insecure dependency on llama-cpp-python version llamacpppython-0.2.61+cpuavx2-cp311-cp311-manylinux231x8664. The vulnerability arises from the application's 'bindingzoo' feature, which allows attackers ...

CVE-2022-4897

creationtimestamp| type| source ---|---|--- 2023-02-21 12:21:53+00:00| seen| https://t.me/cibsecurity/58589 2025-03-14 14:45:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7565...

CVE-2022-4897

The CVE-2022-4897 entry concerns the WordPress BackupBuddy plugin, version

CVE-2022-4897 BackupBuddy < 8.8.3 - Multiple Reflected Cross-Site Scripting

The BackupBuddy WordPress plugin before 8.8.3 does not sanitise and escape some parameters before outputting them back in various places, leading to Reflected Cross-Site Scripting...

CVE-2022-4897 BackupBuddy < 8.8.3 - Multiple Reflected Cross-Site Scripting

The BackupBuddy WordPress plugin before 8.8.3 does not sanitise and escape some parameters before outputting them back in various places, leading to Reflected Cross-Site Scripting...

Security Bulletin: Information Disclosure Vulnerability Affects IBM Emptoris Contract Management (CVE-2020-4897)

Summary Information disclosure vulnerability verbose application errors affects IBM Emptoris Contract Management. Vulnerability Details CVEID: CVE-2020-4897 DESCRIPTION: IBM Emptoris could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned ...

Security Bulletin: Information Disclosure Vulnerability Affects IBM Emptoris Spend Analysis (CVE-2020-4897)

Summary Verbose application errors information disclosure affects IBM Emptoris Spend Analysis. Vulnerability Details CVEID: CVE-2020-4897 DESCRIPTION: IBM Emptoris could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. Thi...

CVE-2019-4897

CVE-2019-4897 entry is rejected/not used; this ID does not represent an active vulnerability.

CVE-2018-4897

Adobe Acrobat Reader (version set: 2018.009.20050 and earlier; 2017.011.30070 and earlier; 2015.006.30394 and earlier) is affected by CVE-2018-4897 due to a boundary condition in the TIFF metadata image-conversion module that reads data past the end of the target buffer. A successful attack can l...