75 matches found
Oracle Linux 7 : firefox (ELSA-2026-8427)
The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-8427 advisory. - Update to 140.9.0 ESR Orabug: 39361657CVE-2026-4684CVE-2026-4685 CVE-2026-4686CVE-2026-4687CVE-2026-4688CVE-2026-4689CVE-2026-4690...
CVE-2026-4718 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-4718 vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
CVE-2026-4718
creationtimestamp| type| source ---|---|--- 2026-03-25 04:01:27+00:00| seen| https://bsky.app/profile/slackers.it/post/3mhu7d6hbhv2w...
firefox-esr-140.9.0-1.1 on GA media (moderate)
firefox-esr-140.9.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10413-1 Rating: moderate Cross-References: CVE-2025-59375 CVE-2026-4684 CVE-2026-4685 CVE-2026-4686 CVE-2026-4687 CVE-2026-4688 CVE-2026-4689 CVE-2026-4690 CVE-2026-4691 CVE-2026-4692 CVE-2026-4693 CVE-2026-4694 CVE-2026-4695...
CVE-2026-4718
Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...
DEBIAN-CVE-2026-4718
Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...
CVE-2026-4718 Undefined behavior in the WebRTC: Signaling component
Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...
CVE-2022-4718
The Landing Page Builder WordPress plugin before 1.4.9.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...
CVE-2005-4718
Opera 8.02 and earlier allows remote attackers to cause a denial of service client crash via 1 a crafted HTML file with a "content: url0;" style attribute, a "bodyA" tag, a long string, and a "u" tag with a long attribute, as demonstrated by opera.html; and 2 a BGSOUND element with a "margin:-99;...
CVE-2025-4718
A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/customeradd.php. The manipulation of the argument last leads to sql injection. The attack can be launched remotely...
CVE-2025-4718
A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/customeradd.php. The manipulation of the argument last leads to sql injection. The attack can be launched remotely...
CVE-2025-4718
CVE-2025-4718 affects Campcodes Sales and Inventory System v1.0. A vulnerability in /pages/customer_add.php allows manipulation of the last parameter to perform SQL injection, with remote exploitation and public disclosure. Multiple sources corroborate the issue across NVD/Red Hat/CVE list entrie...
CVE-2025-4718 Campcodes Sales and Inventory System customer_add.php sql injection
A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/customeradd.php. The manipulation of the argument last leads to sql injection. The attack can be launched remotely...
CVE-2025-4718 Campcodes Sales and Inventory System customer_add.php sql injection
A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/customeradd.php. The manipulation of the argument last leads to sql injection. The attack can be launched remotely...
Linux Distros Unpatched Vulnerability : CVE-2011-4718
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Session fixation vulnerability in the Sessions subsystem in PHP before 5.5.2 allows remote attackers to hijack web sessions by specifying a session ID...
RHEL 8 : thunderbird (RHSA-2024:4718)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:4718 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: Mozilla: Race condition in permission assignment CVE-2024-660...
CVE-2018-4718
Rejected reason: This candidate is unused by its CNA...
WordPress Font Awesome 4 Menus Plugin <= 4.7.0 is vulnerable to Cross Site Scripting (XSS)
Software Font Awesome 4 Menus Type Plugin Vulnerable versions = 4.7.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4718 Patch priority Low CVSS severity Low 6.4 Developer Claim ownership PSID 251cbcaf2eb8 Credits István Márton Require...