83 matches found
ipfire-2-25-auth-rce
Ipfire 2-25 core update 156 rce autenticado el sistema ejecuta un comando al instalar cualquier paquete el sistema obtiene 7zip directamente desde el html y comprueba el directorio tmp versión 2.25 - core update 156 ipfire permite ejecutar comandos arbitrarios del sistema operativo como nobody...
Linux Distros Unpatched Vulnerability : CVE-2026-92033
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 156. CVE-2026-92033 Note that Nessus relies on the presence of the package ...
CVE-2026-92078
Denial-of-service in the Security component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...
CVE-2026-92072
Incorrect boundary conditions in the Safe Browsing component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...
CVE-2026-92068
Site isolation issue in the Reader Mode component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...
CVE-2026-92063
Denial-of-service in the Audio/Video component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...
CVE-2026-92055
Privilege escalation in the DevTools component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...
CVE-2026-92056
Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...
CVE-2026-92050
Sandbox escape due to race condition in the XPConnect component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...
CVE-2026-92046
Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...
CVE-2026-92049
Use-after-free in the Widget: Win32 component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...
CVE-2026-92037
Incorrect boundary conditions in the DOM: Animation component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...
CVE-2026-92033
Privilege escalation in Firefox for Android. This vulnerability was fixed in Firefox 156...
CVE-2026-92036
Incorrect boundary conditions in the Networking: HTTP component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...
CVE-2026-92027
Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...
CVE-2026-92078
A Denial-of-Service vulnerability exists in the Security component of Mozilla Firefox and Thunderbird . This issue has been addressed in Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 . No specific root cause or exploit information is provided in the documentation.
CVE-2026-92074
Mitigation bypass in the Popup Blocker component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...
CVE-2026-92069
This vulnerability involves a spoofing issue within the DOM: Navigation component . The flaw has been addressed in the following versions: Firefox 156 , Firefox ESR 153.3 , Thunderbird 156 , and Thunderbird 153.3 . While multiple connected documents list this CVE, they do not provide specific tec...
CVE-2026-92068
A site isolation issue exists in the Reader Mode component of the Mozilla Firefox and Thunderbird browsers. This vulnerability was addressed in Firefox versions 156 and ESR 153.3, and Thunderbird versions 156 and 153.3. No specific exploit details or in-the-wild exploitation information are provi...