GO-2025-4205 vulnerabilities

Vulnerabilities for packages: traefik-fips...

WordPress Popup Maker plugin <= 1.20.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via popupID Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via popupID Parameter vulnerability discovered by Asaf Mozes in WordPress Plugin Popup Maker versions = 1.20.4...

CVE-2025-4205

creationtimestamp| type| source ---|---|--- 2025-06-03 12:14:01+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqpb7lz242y2 2025-06-03 15:43:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqpmybiqfz2p...

CVE-2025-4205 Popup Maker <= 1.20.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via popupID Parameter

The Popup Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘popupID' parameter in all versions up to, and including, 1.20.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access...

DLA-4205-1 libreoffice - security update

Bulletin has no description...

CVE-2024-4205

The Premium Addons for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the gettemplatecontent function in all versions up to, and including, 4.10.31. This makes it possible for authenticated attackers, with subscriber-level access a...

CVE-2022-4205

In Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could override an existing hash...

Linux Distros Unpatched Vulnerability : CVE-2010-4205

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Google Chrome before 7.0.517.44 does not properly handle the data types of event objects, which allows remote attackers to cause a denial of service or possibly...

RHEL 6 : webkitgtk (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - WebKit: Improper handling of data types from event objects CVE-2010-4205 - webkitgtk: heap-based buffer...

CVE-2024-4205 Premium Addons for Elementor <= 4.10.31 - Missing Authorization to Information Disclosure

The Premium Addons for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the gettemplatecontent function in all versions up to, and including, 4.10.31. This makes it possible for authenticated attackers, with subscriber-level access a...

Malicious code in wlwz-2312-4205 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b9d4929b1bb747b9d7d8ecf7329b64608b02a585851b02f1bcc6cbbceeae900 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE CVE-2023-4205

This was deemed as a false positive both by the reporter and upstream kernel...

CVE-2023-4205

creationtimestamp| type| source ---|---|--- 2023-08-07 18:13:53+00:00| seen| https://t.me/cibsecurity/67880...

CVE-2023-4205

Rejected reason: This was deemed as a false positive both by the reporter and upstream kernel...

CVE-2023-4205

...

CVE-2023-4205

Removed by vendor...

CVE-2023-4205

CVE-2023-4205 entry is rejected/not used; not an active vulnerability.

CVE-2022-4205

CVE-2022-4205 affects GitLab EE/CE prior to 15.6.1, 15.5.5 and 15.4.6. The issue arises when using a branch with a hexadecimal name, which could override an existing hash. The available documents do not specify exploited versions, attack vectors, affected component details beyond the branch-name ...

CVE-2022-4205

In Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could override an existing hash...

FreeBSD : Gitlab -- Multiple Vulnerabilities (3cde510a-7135-11ed-a28b-bff032704f00)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 3cde510a-7135-11ed-a28b-bff032704f00 advisory. - Gitlab reports: DAST API scanner exposes Authorization headers in vulnerabilities Group IP...