TencentOS Server 3: firefox (TSSA-2026:0820)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0820 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

OESA-2026-3195 thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: The code to parse MIME headers for display when forwarding a message if the setting to view all headers was enabled had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the...

CVE-2026-16351 vulnerabilities

Vulnerabilities for packages: firefox...

Linux Distros Unpatched Vulnerability : CVE-2026-16351

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13,...

CVE-2026-16351

creationtimestamp| type| source ---|---|--- 2026-07-22 04:45:40+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260722 2026-07-22 16:26:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mraqgdbx2i22 2026-07-24 00:01:17+00:00| see...

Mozilla Firefox ESR < 115.38

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.38. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-69 advisory. - We are aware that exploit code for this is public however we are not aware of any attacks in the wild...

CVE-2019-16351

ffjpeg before 2019-08-18 has a NULL pointer dereference in huffmandecodestep at huffman.c...

EUVD-2025-16351

Malicious code in bioql PyPI...

CVE-2022-43611

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla...

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla...

CVE-2022-43611

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla...

CVE-2022-43611

CVE-2022-43611 affects CorelDRAW Graphics Suite 23.5.0.506. The root cause is a BMP image parsing flaw that fails to validate user-supplied data, causing a read past the end of an allocated object. This results in information disclosure and, per the initial description, can be leveraged with othe...

CVE-2017-16351

CVE-2017-16351 is rejected; this entry is not used and does not represent an active vulnerability.

CVE-2019-16351

CVE-2019-16351 affects ffjpeg prior to 2019-08-18, where a NULL pointer dereference occurs in huffman_decode_step() within huffman.c. Public sources across multiple vendors (Red Hat, CNVD, NVD, CVE.org, PT-Security) confirm the same flaw and list the vulnerable component as the ffjpeg implementat...