55 matches found
CVE-2026-4925
Improper access control in the users MFA feature in Devolutions Server allows an authenticated user to bypass administrator-enforced restrictions and remove their own multi-factor authentication MFA configuration via a crafted request. This issue affects Server: from 2026.1.6 through 2026.1.11...
CVE-2024-4925
creationtimestamp| type| source ---|---|--- 2025-02-14 09:46:58+00:00| seen| Telegram/WPdJkQJ5bzmqRqXSjZXAUVkiI6svUP8ogSH87ANBm2eBwyZ...
Adobe Digital Editions < 4.5.8 Multiple Information Disclosure (APSB18-13) (macOS)
The version of Adobe Digital Editions installed on the remote macOS host is prior to 4.5.8. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB18-13 advisory. - Adobe Digital Editions versions 4.5.7 and below have an exploitable Out-of-bounds read vulnerability...
CVE-2024-4925 SourceCodester School Intramurals Student Attendance Management System manage_course.php sql injection
A vulnerability was found in SourceCodester School Intramurals Student Attendance Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /intramssams/managecourse.php. The manipulation of the argument id leads to sql injection. The attack may be...
CVE-2024-4925 SourceCodester School Intramurals Student Attendance Management System manage_course.php sql injection
A vulnerability was found in SourceCodester School Intramurals Student Attendance Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /intramssams/managecourse.php. The manipulation of the argument id leads to sql injection. The attack may be...
CVE-2023-4925
creationtimestamp| type| source ---|---|--- 2024-01-15 17:27:06+00:00| seen| https://t.me/ctinow/168464 2024-02-03 13:46:21+00:00| seen| https://t.me/ctinow/178546...
CVE-2023-4925
The CVE-2023-4925 entry concerns the Easy Forms for Mailchimp WordPress plugin (versions up to 6.8.10). Affected component: plugin settings sanitization/escaping, which is inadequate across some settings. Root cause: lack of proper sanitization/escaping enables stored Cross-Site Scripting when hi...
CVE-2023-4925 Easy Forms for Mailchimp <= 6.8.10 - Admin+ Stored Cross-Site Scripting
The Easy Forms for Mailchimp WordPress plugin through 6.8.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...
CVE-2023-4925 Easy Forms for Mailchimp <= 6.8.10 - Admin+ Stored Cross-Site Scripting
The Easy Forms for Mailchimp WordPress plugin through 6.8.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...
CVE-2023-4925 Easy Forms for Mailchimp <= 6.8.10 - Admin+ Stored Cross-Site Scripting
The Easy Forms for Mailchimp WordPress plugin through 6.8.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...
CVE-2022-4925
creationtimestamp| type| source ---|---|--- 2023-07-29 07:30:03+00:00| seen| https://t.me/cibsecurity/67405...
CVE-2022-4925
CVE-2022-4925 describes insufficient validation of untrusted input in QUIC handling in Google Chrome before 97.0.4692.71, allowing a remote attacker to perform header splitting via malicious network traffic. Affected product: Google Chrome (Chromium QUIC stack). Root cause: inadequate input valid...
CVE-2022-4925
Insufficient validation of untrusted input in QUIC in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform header splitting via malicious network traffic. Chromium security severity: Low...
CVE-2020-4925
creationtimestamp| type| source ---|---|--- 2022-03-01 20:24:18+00:00| seen| https://t.me/cibsecurity/38265...
CVE-2020-4925
IBM Spectrum Scale 5.0 and 5.1 are affected by CVE-2020-4925, where a non-root user can overflow the mmfsd daemon with requests and prevent the daemon from servicing other requests. The issue is mitigated by upgrading to 5.1.1 or later (including 5.1.2+); remediation guidance is provided in IBM’s...
Ubuntu 20.04 LTS : Shibboleth vulnerability (USN-4925-1)
The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4925-1 advisory. Toni Huttunen and Fraktal Oy discovered that the Shibboleth Service provider allowed content injection due to allowing attacker-controlled parameters in error or...
CVE-2019-4925
CVE-2019-4925 entry is rejected/not used; this CVE ID is not an active vulnerability entry.
Security Bulletin: Open Source VMware Fusion Vulnerabilities in IBM Pure Application System (CVE-2017-4903, CVE-2017-4904, CVE-2017-4905)
Summary Multiple vulnerabilities in Open Source VMware affects IBM PureApplication System. IBM PureApplication System has addressed Common Vulnerabilities Exposures CVE-2017-4903, CVE-2017-4904, CVE-2017-4905. Additionally this bulletin includes information about the release of fix for Common...
