GO-2026-4980 vulnerabilities

Vulnerabilities for packages: migrate, sftpgo-plugin-geoipfilter, step-issuer, mattermost, grafana, juicefs, cloudnative-pg, secrets-store-csi-driver-provider-gcp, falco-no-driver, k3s, rabbitmq-cluster-operator, undock, ko, kpt, sftpgo-plugin-eventstore, cilium-cli, tekton-chains, kubeflow-katib...

CVE-2026-4980

A local file disclosure vulnerability in the XInclude processing component of Inkscape 1.1 before 1.3 allows a remote attacker to read local files via a crafted SVG file containing malicious xi:include tags...

MiracleLinux 9 : firefox-102.4.0-1.el9.ML.1 (AXSA:2023-4980:05)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2023-4980:05 advisory. Mozilla: Same-origin policy violation could have leaked cross-origin URLs CVE-2022-42927 Mozilla: Memory Corruption in JS Engine CVE-2022-42928...

EUVD-2014-4980

Malware in sbrugna...

CVE-2022-4980

creationtimestamp| type| source ---|---|--- 2025-09-20 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lzcbnovzmp25 2026-06-19 12:45:25+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/98fdda6a-78c5-449c-b129-991623d36312...

CVE-2025-4980

A vulnerability has been found in Netgear DGND3700 1.1.00.151.00.15NA and classified as problematic. This vulnerability affects unknown code of the file /currentsetting.htm of the component minihttp. The manipulation leads to information disclosure. The attack can be initiated remotely. The explo...

CVE-2009-4980

Multiple cross-site scripting XSS vulnerabilities in Photokorn Gallery 1.81 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 where parameter to search.php and 2 qc parameter to admin.php...

CVE-2025-4980

creationtimestamp| type| source ---|---|--- 2025-05-20 15:13:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpmerrrii72h...

CVE-2025-4980

A vulnerability has been found in Netgear DGND3700 1.1.00.151.00.15NA and classified as problematic. This vulnerability affects unknown code of the file /currentsetting.htm of the component minihttp. The manipulation leads to information disclosure. The attack can be initiated remotely. The explo...

CVE-2025-4980

The CVE-2025-4980 entry affects Netgear DGND3700 router firmware (version 1.1.00.15 1.00.15NA) and targets the mini_http component in the /currentsetting.htm file. The root cause is unknown code in this file, enabling remote information disclosure. Multiple sources confirm the vulnerability can b...

CVE-2025-4980 Netgear DGND3700 mini_http currentsetting.htm information disclosure

A vulnerability has been found in Netgear DGND3700 1.1.00.151.00.15NA and classified as problematic. This vulnerability affects unknown code of the file /currentsetting.htm of the component minihttp. The manipulation leads to information disclosure. The attack can be initiated remotely. The explo...

Linux Distros Unpatched Vulnerability : CVE-2016-4980

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A password generation weakness exists in xquest through 2016-06-13. CVE-2016-4980 Note that Nessus relies on the presence of the package as reported by the...

Adobe Reader < 2015.006.30418 / 2017.011.30080 / 2018.011.20040 Multiple Vulnerabilities (APSB18-09) (macOS)

The version of Adobe Reader installed on the remote macOS host is a version prior to 2015.006.30418, 2017.011.30080, or 2018.011.20040. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and...

RHEL 7 : xguest (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - xguest insecure password creation CVE-2016-4980 Note that Nessus has not tested for this issue but has instead reli...

RHEL 6 : xguest (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - xguest insecure password creation CVE-2016-4980 Note that Nessus has not tested for this issue but has instead reli...

WordPress WPKoi Templates for Elementor Plugin <= 2.5.9 is vulnerable to Cross Site Scripting (XSS)

Software WPKoi Templates for Elementor Type Plugin Vulnerable versions = 2.5.9 Fixed in 2.5.11 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4980 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6f047402229a Credits...

CVE-2016-4980

creationtimestamp| type| source ---|---|--- 2024-02-28 17:47:08+00:00| seen| https://t.me/ctinow/195692...

CVE-2023-4980

LibreNMS (librenms/librenms) has a generic Cross-site Scripting (XSS) vulnerability affecting versions prior to 23.9.0. Root cause details are not fully specified in the provided documents. Impact is described as XSS; no in-the-wild exploit details are given. Remediation: upgrade to version 23.9....

CVE-2023-4980 Cross-site Scripting (XSS) - Generic in librenms/librenms

Cross-site Scripting XSS - Generic in GitHub repository librenms/librenms prior to 23.9.0...

MSC-2022-4980

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...