82 matches found
CVE-2026-4980
A local file disclosure vulnerability in the XInclude processing component of Inkscape 1.1 before 1.3 allows a remote attacker to read local files via a crafted SVG file containing malicious xi:include tags...
MiracleLinux 9 : firefox-102.4.0-1.el9.ML.1 (AXSA:2023-4980:05)
The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2023-4980:05 advisory. Mozilla: Same-origin policy violation could have leaked cross-origin URLs CVE-2022-42927 Mozilla: Memory Corruption in JS Engine CVE-2022-42928...
EUVD-2014-4980
Malware in sbrugna...
CVE-2022-4980
creationtimestamp| type| source ---|---|--- 2025-09-20 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lzcbnovzmp25...
CVE-2025-4980
A vulnerability has been found in Netgear DGND3700 1.1.00.151.00.15NA and classified as problematic. This vulnerability affects unknown code of the file /currentsetting.htm of the component minihttp. The manipulation leads to information disclosure. The attack can be initiated remotely. The explo...
CVE-2009-4980
Multiple cross-site scripting XSS vulnerabilities in Photokorn Gallery 1.81 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 where parameter to search.php and 2 qc parameter to admin.php...
CVE-2025-4980
creationtimestamp| type| source ---|---|--- 2025-05-20 15:13:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpmerrrii72h...
CVE-2025-4980
A vulnerability has been found in Netgear DGND3700 1.1.00.151.00.15NA and classified as problematic. This vulnerability affects unknown code of the file /currentsetting.htm of the component minihttp. The manipulation leads to information disclosure. The attack can be initiated remotely. The explo...
CVE-2025-4980 Netgear DGND3700 mini_http currentsetting.htm information disclosure
A vulnerability has been found in Netgear DGND3700 1.1.00.151.00.15NA and classified as problematic. This vulnerability affects unknown code of the file /currentsetting.htm of the component minihttp. The manipulation leads to information disclosure. The attack can be initiated remotely. The explo...
CVE-2025-4980
The CVE-2025-4980 entry affects Netgear DGND3700 router firmware (version 1.1.00.15 1.00.15NA) and targets the mini_http component in the /currentsetting.htm file. The root cause is unknown code in this file, enabling remote information disclosure. Multiple sources confirm the vulnerability can b...
Linux Distros Unpatched Vulnerability : CVE-2016-4980
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A password generation weakness exists in xquest through 2016-06-13. CVE-2016-4980 Note that Nessus relies on the presence of the package as reported by the...
Adobe Reader < 2015.006.30418 / 2017.011.30080 / 2018.011.20040 Multiple Vulnerabilities (APSB18-09) (macOS)
The version of Adobe Reader installed on the remote macOS host is a version prior to 2015.006.30418, 2017.011.30080, or 2018.011.20040. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and...
RHEL 6 : xguest (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - xguest insecure password creation CVE-2016-4980 Note that Nessus has not tested for this issue but has instead reli...
RHEL 7 : xguest (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - xguest insecure password creation CVE-2016-4980 Note that Nessus has not tested for this issue but has instead reli...
WordPress WPKoi Templates for Elementor Plugin <= 2.5.9 is vulnerable to Cross Site Scripting (XSS)
Software WPKoi Templates for Elementor Type Plugin Vulnerable versions = 2.5.9 Fixed in 2.5.11 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4980 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6f047402229a Credits...
CVE-2016-4980
creationtimestamp| type| source ---|---|--- 2024-02-28 17:47:08+00:00| seen| https://t.me/ctinow/195692...
CVE-2023-4980 Cross-site Scripting (XSS) - Generic in librenms/librenms
Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 23.9.0...
CVE-2023-4980
LibreNMS (librenms/librenms) has a generic Cross-site Scripting (XSS) vulnerability affecting versions prior to 23.9.0. Root cause details are not fully specified in the provided documents. Impact is described as XSS; no in-the-wild exploit details are given. Remediation: upgrade to version 23.9....
K16398: Python vulnerability CVE-2006-4980
Security Advisory Description Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts. CVE-2006-4980 Impact...
VulnCheck KEV: CVE-2022-4980
General Bytes Crypto Application Server CAS beginning with version 20201208 prior to 20220531.38 backport and 20220725.22 mainline contains an authentication bypass in the admin web interface. An unauthenticated attacker could invoke the same URL used by the product's default-installation /...