CVE-2026-4805

The Woostify plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.5.0 This is due to insufficient input sanitization and output escaping in the bundled Lity.js lightbox library, where user-controlled input from the href attribute is concatenated...

MiracleLinux 7 : java-1.7.0-openjdk-1.7.0.91-2.6.2.1.0.1.el7.AXS7 (AXSA:2015-517:02)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-517:02 advisory. The OpenJDK runtime environment. Security issues fixed with this release: CVE-2015-4734 RESERVED This candidate has been reserved by an organization ...

CVE-2025-20768

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4805...

PT-2025-48625

In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10196993; Issue ID: MSV-4805...

CVE-2025-4805

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WatchGuard Fireware OS allows Stored XSS. This vulnerability requires an authenticated administrator session to a locally managed Firebox. This issue affects Fireware OS: from 12.0 through...

CVE-2025-4805

A stored cross-site scripting XSS vulnerability exists in the management interface of WatchGuard Firebox appliances via the Access Portal configuration. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code in the...

CVE-2025-4805

creationtimestamp| type| source ---|---|--- 2025-05-16 20:34:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16755...

CVE-2025-4805 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Acces Portal Configuration

A stored cross-site scripting XSS vulnerability exists in the management interface of WatchGuard Firebox appliances via the Access Portal configuration. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code in the...

CVE-2025-4805

CVE-2025-4805 describes a stored XSS vulnerability in WatchGuard Fireware OS (Firebox). The issue arises from improper input neutralization during web page generation, allowing stored XSS when an authenticated administrator session to a locally managed Firebox is present. Affected versions are Fi...

CVE-2025-4805 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Acces Portal Configuration

A stored cross-site scripting XSS vulnerability exists in the management interface of WatchGuard Firebox appliances via the Access Portal configuration. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code in the...

Linux Distros Unpatched Vulnerability : CVE-2016-4805

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free vulnerability in drivers/net/ppp/pppgeneric.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service memory corruption...

Linux Distros Unpatched Vulnerability : CVE-2010-4805

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The socket implementation in net/core/sock.c in the Linux kernel before 2.6.35 does not properly manage a backlog of received packets, which allows remote...

CVE-2022-4805

Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1...

CVE-2024-4805

A vulnerability classified as critical has been found in Kashipara College Management System 1.0. This affects an unknown part of the file editfaculty.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to...

CVE-2024-4805

A vulnerability classified as critical has been found in Kashipara College Management System 1.0. This affects an unknown part of the file editfaculty.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to...

CVE-2024-4805

CVE-2024-4805 affects Kashipara College Management System 1.0, with a SQL injection flaw in the edit_faculty.php page caused by manipulation of the id parameter. The vulnerability is exploitable remotely, and public exploit information exists (VDB-263925). Multiple connected sources corroborate t...

CVE-2024-4805 Kashipara College Management System edit_faculty.php sql injection

A vulnerability classified as critical has been found in Kashipara College Management System 1.0. This affects an unknown part of the file editfaculty.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to...

CVE-2024-4805 Kashipara College Management System edit_faculty.php sql injection

A vulnerability classified as critical has been found in Kashipara College Management System 1.0. This affects an unknown part of the file editfaculty.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to...

Malicious code in wlwz-2312-4805 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74334e5b13d570ca5b27fe190913e9c63df1b4b2917464f7c5f72c13b78ab067 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-5770

The CVE-2023-5770 issue affects Proofpoint Enterprise Protection’s email delivery agent. The vulnerability arises from inappropriate encoding when rewriting emails before delivery, allowing an unauthenticated attacker to inject improperly encoded HTML into the email body via the subject. Affected...