Linux Distros Unpatched Vulnerability : CVE-2026-8966

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure in the IP Protection component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. CVE-2026-8966 Note that Nessus relies on...

CVE-2026-8966

creationtimestamp| type| source ---|---|--- 2026-05-19 17:01:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm7ulixcic2q 2026-05-19 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260520...

CVE-2026-8966

CVE-2026-8966 affects Mozilla Thunderbird (earlier than 151.0) and concerns information disclosure in the IP Protection component. Multiple connected sources corroborate the impact as information disclosure, with the vulnerability fixed in Thunderbird 151 (and Firefox 151 per the initial entry). ...

MINI-Q39H-22X2-8966

Bulletin has no description...

MINI-JC38-WG86-8966

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2015-8966

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - arch/arm/kernel/sysoabi-compat.c in the Linux kernel before 4.4 allows local users to gain privileges via a crafted 1 FOFDGETLK, 2 FOFDSETLK, or 3 FOFDSETLKW...

MAL-2025-8966 Malicious code in @malware-test-strum-arefy-kavas-mawky/test-mlw3-strum-arefy-kavas-mawky (npm)

The package @malware-test-strum-arefy-kavas-mawky/test-mlw3-strum-arefy-kavas-mawky was found to contain malicious code...

CVE-2025-8966 itsourcecode Online Tour and Travel Management System tax.php sql injection

A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This issue affects some unknown processing of the file /admin/operations/tax.php. The manipulation of the argument tname leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2024-8966

A vulnerability in the file upload process of gradio-app/gradio version @gradio/[email protected] allows for a Denial of Service DoS attack. An attacker can append a large number of characters to the end of a multipart boundary, causing the system to continuously process each character and issue...

CVE-2024-8966

creationtimestamp| type| source ---|---|--- 2025-03-20 16:18:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8226...

academic-chatgpt (>=0.3.0 <=0.4.1), africanwhisper (>=0.2.1 <=0.9.0) +341 more potentially affected by CVE-2024-8966 via gradio (>=1.7.7 <=5.21.0)

gradio PYPI version =1.7.7, =0.3.0, =0.2.1, =0.1.5, =0.0.6, =0.0.2, =0.1.0, =0.8.11, =0.4.0, =0.0.4, =0.1.1, =0.7.0.dev134, =0.7.0.dev143 - anymodality =0.1.0 and more Source cves: CVE-2024-8966 Source advisory: OSV:GHSA-5CPQ-9538-JM2J...

ace-step (=0.1.0), aeiva (>=0.8.2.4 <=0.8.2.6) +229 more potentially affected by CVE-2024-8966 via gradio (>=5.0.0 <=5.6.0)

gradio PYPI version =5.0.0, =0.8.2.4, =2.0.0, =0.3.2, =0.1.1, =0.6.0, =0.1.4, =0.0.1, =0.0.1, =0.2.0, =0.1.1, =0.1.13 - dataflex =1.0.0 and more Source cves: CVE-2024-8966 Source advisory: SNYK:PYTHON-GRADIO-9504423...

CVE-2024-8966

A vulnerability in the file upload process of gradio-app/gradio version @gradio/[email protected] allows for a Denial of Service DoS attack. An attacker can append a large number of characters to the end of a multipart boundary, causing the system to continuously process each character and issue...

CVE-2024-8966 Denial of Service in gradio-app/gradio

A vulnerability in the file upload process of gradio-app/gradio version @gradio/[email protected] allows for a Denial of Service DoS attack. An attacker can append a large number of characters to the end of a multipart boundary, causing the system to continuously process each character and issue...

CGA-WJ9F-8966-PMGG

Bulletin has no description...

SUSE CVE-2015-8966

arch/arm/kernel/sysoabi-compat.c in the Linux kernel before 4.4 allows local users to gain privileges via a crafted 1 FOFDGETLK, 2 FOFDSETLK, or 3 FOFDSETLKW command in an fcntl64 system call...

Tiki Wiki CMS Groupware < 21.0 XSS Vulnerability

Tiki Wiki CMS Groupware is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2020-8966

There is an Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in php webpages of Tiki-Wiki Groupware. Tiki-Wiki CMS all versions through 20.0 allows malicious users to cause the injection of malicious code fragments scripts into a legitimate web page...

CVE-2020-8966

There is an Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in php webpages of Tiki-Wiki Groupware. Tiki-Wiki CMS all versions through 20.0 allows malicious users to cause the injection of malicious code fragments scripts into a legitimate web page...

CVE-2020-8966

CVE-2020-8966 is a cross-site scripting (XSS) vulnerability in the PHP pages of Tiki Wiki CMS Groupware. The root cause is improper neutralization/validation of script-related HTML tags in web pages, allowing injection of script fragments. Affected software includes Tiki-Wiki CMS Groupware versio...