Lucene search
+L

77 matches found

Chainguard
Chainguard
•added 2026/07/01 2:16 p.m.•29 views

CVE-2025-4085 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

7.1CVSS6.8AI score0.003EPSS
SaveExploits0
Wolfi
Wolfi
•added 2026/07/01 2:16 p.m.•35 views

CVE-2025-4085 vulnerabilities

Vulnerabilities for packages: firefox...

7.1CVSS6.8AI score0.003EPSS
SaveExploits0
EUVD
EUVD
•added 2026/01/22 4:51 p.m.•15 views

EUVD-2026-4085

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Accordion Slider PRO accordionsliderpro allows Reflected XSS.This issue affects Accordion Slider PRO: from n/a through = 1.2...

5.4AI score0.0028EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/25 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2016-4085

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.12.x before 1.12.11 allows remote attackers to cause a...

5.9CVSS6.9AI score0.03034EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/08/15 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2025-4085

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges. Thi...

7.1CVSS6.9AI score0.003EPSS
SaveExploits0References2
Circl
Circl
•added 2025/08/05 9:02 p.m.•51 views

CVE-2011-4085

creationtimestamp| type| source ---|---|--- 2025-08-05 21:02:20+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lvom73vwep2a 2026-02-02 12:25:26+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/657e89ab-9b5d-4cea-9802-901a5d6a8a8f...

6.8CVSS4.9AI score0.0294EPSS
SaveExploits3References2
VulnCheck KEV
VulnCheck KEV
•added 2025/07/14 12:00 a.m.•63 views

VulnCheck KEV: CVE-2011-4085

The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the GET and POST methods, which allow remote attackers to bypass authentication ...

6.8CVSS6.5AI score0.0294EPSS
SaveIn wildExploits3References2
NVD
NVD
•added 2025/04/29 2:15 p.m.•23 views

CVE-2025-4085

An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges. This vulnerability was fixed in Firefox 138 and Thunderbird 138...

7.1CVSS0.003EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2025/04/29 2:15 p.m.•12 views

CVE-2025-4085

An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges. This vulnerability affects Firefox 138 and Thunderbird 138...

7.1CVSS6.8AI score0.003EPSS
SaveExploits0References6
CVE
CVE
•added 2025/04/29 1:13 p.m.•121 views

CVE-2025-4085

The Firefox web browser and Thunderbird email client are affected by a vulnerability involving insecure management of privileges. An attacker who gains control over a content process can leverage the privileged UITour actor to leak sensitive information or escalate privileges. This flaw impacts v...

7.1CVSS6.7AI score0.003EPSS
SaveExploits0References3Affected Software2
Debian CVE
Debian CVE
•added 2025/04/29 1:13 p.m.•34 views

CVE-2025-4085

An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges. This vulnerability was fixed in Firefox 138 and Thunderbird 138...

7.1CVSS6.7AI score0.003EPSS
SaveExploits0
Cvelist
Cvelist
•added 2025/04/29 1:13 p.m.•39 views

CVE-2025-4085 Potential information leakage and privilege escalation in UITour actor

An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges. This vulnerability was fixed in Firefox 138 and Thunderbird 138...

0.003EPSS
SaveExploits0References3
osv_dla
osv_dla
•added 2025/03/18 12:00 a.m.•29 views

DLA-4085-1 tzdata - new timezone database

Bulletin has no description...

7.2AI score
SaveExploits0
Vulnrichment
Vulnrichment
•added 2024/05/02 4:52 p.m.•25 views

CVE-2024-4085

The Tabellen von faustball.com plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

4.4CVSS5.8AI score0.00406EPSS
SaveExploits0References2
CVE
CVE
•added 2024/05/02 4:52 p.m.•78 views

CVE-2024-4085

CVE-2024-4085 affects the Tabellen von faustball.com WordPress plugin. It is a Stored XSS in admin settings in all versions up to 2.0.4 due to insufficient input sanitization and output escaping. The vulnerability requires authenticated admin-level access and affects multi-site installations or w...

4.4CVSS5.7AI score0.00406EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2024/04/30 12:00 a.m.•29 views

WordPress Tabellen von faustball.com Plugin <= 2.0.4 is vulnerable to Cross Site Scripting (XSS)

Software Tabellen von faustball.com Type Plugin Vulnerable versions = 2.0.4 Fixed in 2.1.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4085 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 83a3182bb140 Credits Benedictus...

4.4CVSS5.8AI score0.00406EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
•added 2023/10/17 12:00 a.m.•22 views

SUSE: Security Advisory (SUSE-SU-2023:4085-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.7AI score0.0054EPSS
SaveExploits2References7
SUSE CVE
SUSE CVE
•added 2023/02/15 5:18 a.m.•15 views

SUSE CVE-2015-4085

Directory traversal vulnerability in node/hooks/express/tests.js in Etherpad frontend tests before 1.6.1...

7.5CVSS7AI score0.0232EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2022/11/21 12:00 a.m.•25 views

SUSE: Security Advisory (SUSE-SU-2022:4085-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8AI score0.0105EPSS
SaveExploits0References2
Circl
Circl
•added 2022/11/20 4:36 p.m.•17 views

CVE-2022-4085

creationtimestamp| type| source ---|---|--- 2022-11-20 16:36:22+00:00| seen| https://t.me/cibsecurity/53219...

4.8AI score
SaveExploits0References1
Rows per page
Query Builder