26 matches found
CVE-2026-9454
creationtimestamp| type| source ---|---|--- 2026-06-01 07:27:25+00:00| seen| https://bsky.app/profile/cyberowi.pl/post/3mn7kk5sfns2s...
MiracleLinux 9 : webkit2gtk3-2.46.3-2.el9_5 (AXSA:2024-9454:08)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9454:08 advisory. webkitgtk: data isolation bypass vulnerability CVE-2024-44309 Tenable has extracted the preceding description block directly from the MiracleLinux security...
CVE-2025-9454
creationtimestamp| type| source ---|---|--- 2025-12-16 13:47:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115729552193462662 2025-12-17 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1118/...
CVE-2025-9454 PRT File Parsing Out-of-Bounds Read Vulnerability
A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...
ECHO-9454-EFCE-116B
Bulletin has no description...
MAL-2025-9454 Malicious code in @taktikangea/odio-nobis-laudantium (npm)
The package @taktikangea/odio-nobis-laudantium was found to contain malicious code...
CVE-2024-9454
creationtimestamp| type| source ---|---|--- 2024-10-26 05:37:47+00:00| seen| https://t.me/cvedetector/9011...
CVE-2024-9454 PriPre <= 0.4.11 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
The PriPre plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 0.4.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to...
WordPress PriPre Plugin <= 0.4.11 is vulnerable to Cross Site Scripting (XSS)
Software PriPre Type Plugin Vulnerable versions = 0.4.11 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9454 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 139baf55ba7a Credits Francesco Carlucci Required...
Moderate: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Scientific Linux Security Update : kernel on SL7.x x86_64 (20201001)
Security Fixes : - kernel: use-after-free in sound/core/timer.c CVE-2019-19807 - kernel: out of bounds write in function i2csmbusxferemulated in drivers/i2c/i2c-core-smbus.c CVE-2017-18551 - kernel: race condition in smptasktimedout and smptaskdone in drivers/scsi/libsas/sasexpander.c leads to...
RHEL 7 : kernel (RHSA-2020:4060)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4060 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: use-after-free in...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
Important: Red Hat Security Advisory: kernel-alt security and bug fix update
An update for kernel-alt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...
RHEL 7 : kernel-alt (RHSA-2020:2104)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2104 advisory. The kernel-alt packages provide the Linux kernel version 4.x. Security Fixes: kernel: double free may be caused by the function...
CVE-2020-9454
A CSRF vulnerability in the RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote attackers to forge requests on behalf of a site administrator to change all settings for the plugin, including deleting users, creating new roles with escalated privileges, and allowing PHP file uploa...
CVE-2020-9454
CVE-2020-9454 is a CSRF vulnerability in the WordPress plugin RegistrationMagic (versions up to 4.6.0.3). It allows an attacker to forge requests on behalf of an site administrator to modify plugin settings, including deleting users, creating privileged roles, and enabling PHP file uploads. Multi...
CVE-2015-9454
creationtimestamp| type| source ---|---|--- 2019-10-08 15:49:27+00:00| seen| https://t.me/cibsecurity/7268...
CVE-2015-9454
The CVE corresponds to a SQL Injection in the WordPress Smooth Slider plugin (versions before 2.7). The vulnerability is triggered via the admin page parameter current_slider_id on wp-admin/admin.php?page=smooth-slider-admin, with the issue reported by multiple sources; CVSS data in the NVD shows...
CVE-2019-9454
CVE-2019-9454 affects the Android kernel, specifically the i2c driver, where an out-of-bounds write could corrupt memory. This leads to local escalation of privilege with SYSTEM execution privileges required; no user interaction is needed for exploitation. Public references describe the vulnerabi...