77 matches found
CVE-2025-4085 vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
CVE-2025-4085 vulnerabilities
Vulnerabilities for packages: firefox...
EUVD-2026-4085
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Accordion Slider PRO accordionsliderpro allows Reflected XSS.This issue affects Accordion Slider PRO: from n/a through = 1.2...
Linux Distros Unpatched Vulnerability : CVE-2016-4085
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.12.x before 1.12.11 allows remote attackers to cause a...
Linux Distros Unpatched Vulnerability : CVE-2025-4085
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges. Thi...
CVE-2011-4085
creationtimestamp| type| source ---|---|--- 2025-08-05 21:02:20+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lvom73vwep2a 2026-02-02 12:25:26+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/657e89ab-9b5d-4cea-9802-901a5d6a8a8f...
VulnCheck KEV: CVE-2011-4085
The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the GET and POST methods, which allow remote attackers to bypass authentication ...
CVE-2025-4085
An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges. This vulnerability was fixed in Firefox 138 and Thunderbird 138...
CVE-2025-4085
An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges. This vulnerability was fixed in Firefox 138 and Thunderbird 138...
CVE-2025-4085
An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges. This vulnerability was fixed in Firefox 138 and Thunderbird 138...
CVE-2025-4085
CVE-2025-4085 affects Mozilla Firefox (earlier than 138.0) and Mozilla Thunderbird (earlier than 138.0). The issue arises when a content process could abuse the privileged UITour actor to leak sensitive information or escalate privileges. The description consistently identifies the root cause as ...
CVE-2025-4085 Potential information leakage and privilege escalation in UITour actor
An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges. This vulnerability was fixed in Firefox 138 and Thunderbird 138...
DLA-4085-1 tzdata - new timezone database
Bulletin has no description...
CVE-2024-4085
The Tabellen von faustball.com plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...
CVE-2024-4085
CVE-2024-4085 affects the Tabellen von faustball.com WordPress plugin. It is a Stored XSS in admin settings in all versions up to 2.0.4 due to insufficient input sanitization and output escaping. The vulnerability requires authenticated admin-level access and affects multi-site installations or w...
WordPress Tabellen von faustball.com Plugin <= 2.0.4 is vulnerable to Cross Site Scripting (XSS)
Software Tabellen von faustball.com Type Plugin Vulnerable versions = 2.0.4 Fixed in 2.1.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4085 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 83a3182bb140 Credits Benedictus...
SUSE: Security Advisory (SUSE-SU-2023:4085-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2015-4085
Directory traversal vulnerability in node/hooks/express/tests.js in Etherpad frontend tests before 1.6.1...
SUSE: Security Advisory (SUSE-SU-2022:4085-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...