CVE-2026-8972 vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

CVE-2026-8972 vulnerabilities

Vulnerabilities for packages: firefox...

Linux Distros Unpatched Vulnerability : CVE-2026-8972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 151 and Thunderbird 151. CVE-2026-8972 Note that Nessus relie...

CVE-2026-8972

Privilege escalation in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 151 and Thunderbird 151...

UBUNTU-CVE-2026-8972

Privilege escalation in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 151 and Thunderbird 151...

CVE-2026-8972 Privilege escalation in the WebRTC: Audio/Video component

Privilege escalation in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 151 and Thunderbird 151...

MINI-XMCC-GP7V-8972

Bulletin has no description...

MINI-W9M8-QV59-8972

Bulletin has no description...

CVE-2025-8972

A vulnerability was identified in itsourcecode Online Tour and Travel Management System 1.0. This issue affects some unknown processing of the file /admin/page-login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2025-8972

creationtimestamp| type| source ---|---|--- 2025-08-14 20:04:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwf56prxdk2d...

MAL-2025-8972 Malicious code in @malware-test-stylo-avast-lammy-spiff/test-mlw3-stylo-avast-lammy-spiff (npm)

The package @malware-test-stylo-avast-lammy-spiff/test-mlw3-stylo-avast-lammy-spiff was found to contain malicious code...

CVE-2024-8972

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mobil365 Informatics Saha365 App allows SQL Injection. This issue affects Saha365 App: before 30.09.2024...

CVE-2024-8972

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mobil365 Informatics Saha365 App allows SQL Injection. This issue affects Saha365 App: before 30.09.2024...

CVE-2024-8972

creationtimestamp| type| source ---|---|--- 2024-12-17 13:44:32+00:00| seen| https://infosec.exchange/users/cve/statuses/113668461133236172 2024-12-17 15:56:19+00:00| seen| https://t.me/cvedetector/13093...

CVE-2024-8972

CVE-2024-8972 describes an SQL injection in Mobil365 Informatics’ Saha365 App caused by improper neutralization of special elements in SQL commands. Affected: Saha365 App prior to 30.09.2024. Root cause: improper neutralization of dynamic SQL. Impact as per sources: high confidentiality, integrit...

CVE-2024-8972 SQLi in Mobil365 Informatics' Saha365 App

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mobil365 Informatics Saha365 App allows SQL Injection. This issue affects Saha365 App: before 30.09.2024...

CVE-2024-8972 SQLi in Mobil365 Informatics' Saha365 App

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mobil365 Informatics Saha365 App allows SQL Injection. This issue affects Saha365 App: before 30.09.2024...

SUSE CVE-2015-8972

Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess aka gnuchess before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode...

garmingps.ch Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1156975 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

CVE-2018-8972

Creditwest Bank CMS Project aka CWCMS through 2017-07-28 has CSRF in the functionality for updating the site configuration, which allows remote attackers to inject arbitrary PHP code, as demonstrated by a PHP shell that calls eval on request parameters...