CVE-2026-4708 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-4708 vulnerabilities

Vulnerabilities for packages: firefox...

GO-2026-4708 SiYuan importStdMd: unvalidated localPath imports arbitrary host directories as persistent notes in github.com/siyuan-note/siyuan

SiYuan importStdMd: unvalidated localPath imports arbitrary host directories as persistent notes in github.com/siyuan-note/siyuan...

CVE-2026-4708

creationtimestamp| type| source ---|---|--- 2026-03-25 03:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260325 2026-03-25 04:01:24+00:00| seen| https://bsky.app/profile/slackers.it/post/3mhu7d4cn4y23...

firefox-esr-140.9.0-1.1 on GA media (moderate)

firefox-esr-140.9.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10413-1 Rating: moderate Cross-References: CVE-2025-59375 CVE-2026-4684 CVE-2026-4685 CVE-2026-4686 CVE-2026-4687 CVE-2026-4688 CVE-2026-4689 CVE-2026-4690 CVE-2026-4691 CVE-2026-4692 CVE-2026-4693 CVE-2026-4694 CVE-2026-4695...

CVE-2026-4708

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

CVE-2026-4708

Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

CVE-2009-4708

SQL injection vulnerability in the Gobernalia Front End News Submitter gbfenewssubmit extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2011-4708

Cross-site scripting XSS vulnerability in IBM Rational Asset Manager before 7.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2025-4708

A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/salesadd.php. The manipulation of the argument discount leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-4708

creationtimestamp| type| source ---|---|--- 2025-05-15 19:03:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpa7cwu3552l...

CVE-2025-4708

A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/salesadd.php. The manipulation of the argument discount leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-4708 Campcodes Sales and Inventory System sales_add.php sql injection

A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/salesadd.php. The manipulation of the argument discount leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-4708 Campcodes Sales and Inventory System sales_add.php sql injection

A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/salesadd.php. The manipulation of the argument discount leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

Security Bulletin: Trusteer Pinpoint affected by security vulnerability CVE-2020-4708

Summary Trusteer Pinpoint has addressed the issue. Vulnerability Details CVEID:CVE-2020-4708 DESCRIPTION: IBM Trusteer Pinpoint could disclose some information due to using a wildcard in the Access-Control-Allow-Origin header. CVSS Base score: 3.7 CVSS Temporal Score: See:...

mySCADA myPro Hard-coded Telnet Password (CVE-2024-4708

Binary data myscadamyprocve-2024-4708.nbin...

CVE-2024-4708

mySCADA myPRO uses a hard-coded password which could allow an attacker to remotely execute code on the affected device...

CVE-2024-4708 mySCADA myPRO Use of Hard-coded Password

mySCADA myPRO uses a hard-coded password which could allow an attacker to remotely execute code on the affected device...

CVE-2024-4708 mySCADA myPRO Use of Hard-coded Password

mySCADA myPRO uses a hard-coded password which could allow an attacker to remotely execute code on the affected device...

CVE-2024-4708

The connected advisories confirm CVE-2024-4708 affects mySCADA myPRO (versions before 8.31.0) due to a hard-coded credential in the telnet service (listening on TCP 5005). This could enable remote code execution over the network without authentication, running with the service account. Remediatio...