CVE-2026-74952

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:49+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74951

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:46+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74950

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:44+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74949

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:42+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74948

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:40+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74947

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:37+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74946

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:35+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74944

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:30+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74942

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:26+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74941

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:23+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74940

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:21+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74939

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:19+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74937

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:14+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74936

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:12+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74935

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:10+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

CVE-2026-74934

creationtimestamp| type| source ---|---|--- 2026-08-19 04:45:08+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260819...

W3 Total Cache <= 2.9.3 - Unauthenticated Dynamic Security Token Disclosure

The W3 Total Cache WordPress plugin through version 2.9.3 skips its entire output buffering and processing pipeline whenever an incoming request's User-Agent header contains the string "W3 Total Cache", without authenticating the caller. On sites that use developer-placed dynamic fragment tags, t...

Navidrome <=0.54.5 - Authentication Bypass in Subsonic API

Navidrome is an open source web-based music collection server and streamer. Starting in version 0.52.0 and prior to version 0.54.5, in certain Subsonic API endpoints, a flaw in the authentication check process allows an attacker to specify any arbitrary username that does not exist on the system,...

WP Directory Kit <= 1.4.4 - Authentication Bypass

The WP Directory Kit plugin for WordPress version 1.4.4 and below contains an authentication bypass vulnerability in its auto-login functionality. The vulnerability allows unauthenticated attackers to gain administrative access by exploiting a cryptographically weak token generation mechanism tha...

JS Help Desk <= 2.8.1 - SQL Injection

The JS Help Desk – Best Help Desk & Support Plugin plugin for WordPress is vulnerable to SQL Injection via the 'email' and 'trackingid' parameters in all versions up to 2.8.2 exclusive due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing S...