CVE-2026-4687 vulnerabilities

Vulnerabilities for packages: firefox...

SUSE CVE-2026-4687

Sandbox escape due to incorrect boundary conditions in the Telemetry component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

CVE-2026-4687

creationtimestamp| type| source ---|---|--- 2026-03-25 03:00:13+00:00| seen| https://www.mozilla.org/en-US/security/advisories/mfsa2026-20/ 2026-03-25 04:01:18+00:00| seen| https://bsky.app/profile/slackers.it/post/3mhu7cxyuvt2w 2026-03-29 05:26:23+00:00| seen|...

firefox-esr-140.9.0-1.1 on GA media (moderate)

firefox-esr-140.9.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10413-1 Rating: moderate Cross-References: CVE-2025-59375 CVE-2026-4684 CVE-2026-4685 CVE-2026-4686 CVE-2026-4687 CVE-2026-4688 CVE-2026-4689 CVE-2026-4690 CVE-2026-4691 CVE-2026-4692 CVE-2026-4693 CVE-2026-4694 CVE-2026-4695...

DEBIAN-CVE-2026-4687

Sandbox escape due to incorrect boundary conditions in the Telemetry component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

CVE-2026-4687

Sandbox escape due to incorrect boundary conditions in the Telemetry component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

CVE-2012-4687

Post Oak AWAM Bluetooth Reader Traffic System does not use a sufficient source of entropy for private keys, which makes it easier for man-in-the-middle attackers to spoof a device by predicting a key value...

CVE-2024-4687

creationtimestamp| type| source ---|---|--- 2025-02-19 22:21:29+00:00| seen| Telegram/shO2tYvv6agwgrkf1z6vLAX6NC-Qf2uf6nX0Ft0QvfnOdWyW...

PT-2024-8674 · Tenda · Tenda I22

Name of the Vulnerable Software and Affected Versions: Tenda i22 version 1.0.0.34687 Description: A vulnerability has been found in the function websReadEvent of the file "/goform/GetIPTV?fgHPOST/goform/SysToo". The manipulation of the argument Content-Length leads to null pointer dereference. Th...

CVE-2024-4687

A vulnerability classified as problematic has been found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the file /view/createevents.php. The manipulation of the argument myindex leads to cross site scripting. It is possible to launch the attack...

WordPress PageLayer Plugin < 1.7.7 is vulnerable to Cross Site Scripting (XSS)

Software PageLayer Type Plugin Vulnerable versions 1.7.7 Fixed in 1.7.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4687 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a2e6d35b385c Credits Marc Montpas Required...

CVE-2023-4687

The Page Builder: Pagelayer WordPress plugin before 1.7.7 doesn't prevent unauthenticated attackers from updating a post's header or footer code on scheduled posts...

CVE-2023-4687 PageLayer < 1.7.7 - Unauthenticated Stored XSS

The Page Builder: Pagelayer WordPress plugin before 1.7.7 doesn't prevent unauthenticated attackers from updating a post's header or footer code on scheduled posts...

CVE-2023-4687 PageLayer < 1.7.7 - Unauthenticated Stored XSS

The Page Builder: Pagelayer WordPress plugin before 1.7.7 doesn't prevent unauthenticated attackers from updating a post's header or footer code on scheduled posts...

CVE-2023-4687

The CVE-2023-4687 entry concerns the WordPress PageLayer (Pagelayer) plugin, specifically versions before 1.7.7. The affected component is the Header/Body/Footer code editor used on scheduled posts. Root cause per reports is lack of input protection, enabling unauthenticated attackers to update a...

Oracle Linux 7 : libvirt (ELSA-2019-4687)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-4687 advisory. - logging: restrict sockets to mode 0600 Daniel P. Berrange Orabug: 29861433 CVE-2019-10132 - locking: restrict sockets to mode 0600 Daniel P. Berrange Orabug:...

CVE-2022-4687

creationtimestamp| type| source ---|---|--- 2022-12-23 14:14:31+00:00| seen| https://t.me/cibsecurity/55236 2025-04-09 20:48:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11170...

CVE-2022-4687 Incorrect Use of Privileged APIs in usememos/memos

Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4687

The CVE-2022-4687 entry concerns usememos/memos prior to version 0.9.0 with an issue described as the incorrect use of privileged APIs in the GitHub repository. The vulnerability is rated HIGH (CVSS ~8.1), with potential high impact on confidentiality and integrity but no availability impact repo...

CVE-2022-4687 Incorrect Use of Privileged APIs in usememos/memos

Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.0...