Amazon Linux 2 : libpng, --advisory ALAS2-2026-3266 (ALAS-2026-3266)

The version of libpng installed on the remote host is prior to 1.5.13-8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3266 advisory. Use-after-free in pngsetPLTE, pngsettRNS and pngsethIST in libpng before 1.6.57. Passing a pointer returned by the corresponding...

Medium: libpng

Issue Overview: Use-after-free in pngsetPLTE, pngsettRNS and pngsethIST in libpng before 1.6.57. Passing a pointer returned by the corresponding getter back into the setter causes the setter to read from a stale pointer after freeing the internal buffer, leading to corrupted chunk data and...

CVE-2026-3266

creationtimestamp| type| source ---|---|--- 2026-03-04 00:33:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg6zw5m5pz2k 2026-03-05 12:24:09+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/opentext-security-advisory-av26-199...

CVE-2026-3266

Missing Authorization vulnerability in OpenText™ Filr allows Authentication Bypass. The vulnerability could allow unauthenticated users to get XSRF token and do RPC with carefully crafted programs. This issue affects Filr: through 25.1.2...

MiracleLinux 7 : yum-utils-1.1.31-46.el7 (AXSA:2018-3266:02)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-3266:02 advisory. yum-utils: reposync: improper path validation may lead to directory traversal CVE-2018-10897 Tenable has extracted the preceding description block directly...

CVE-2023-3266

A non-feature complete authentication mechanism exists in the production application allowing an attacker to bypass all authentication checks if LDAP authentication is selected.An unauthenticated attacker can leverage this vulnerability to log in to the CypberPower PowerPanel Enterprise as an...

CVE-2025-3266

creationtimestamp| type| source ---|---|--- 2025-04-04 19:36:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10534 2025-04-04 21:06:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llzd3nxfuu2f 2025-04-05 00:42:50+00:00| seen|...

CVE-2025-3266 qinguoyi TinyWebServer http_conn.cpp stack-based overflow

A vulnerability, which was classified as critical, has been found in qinguoyi TinyWebServer up to 1.0. Affected by this issue is some unknown functionality of the file /http/httpconn.cpp. The manipulation of the argument name/password leads to stack-based buffer overflow. The attack may be launch...

CVE-2023-3266

creationtimestamp| type| source ---|---|--- 2023-08-14 12:19:09+00:00| seen| https://t.me/cibsecurity/68423...

CVE-2023-3266

A non-feature complete authentication mechanism exists in the production application allowing an attacker to bypass all authentication checks if LDAP authentication is selected.An unauthenticated attacker can leverage this vulnerability to log in to the CypberPower PowerPanel Enterprise as an...

CVE-2023-3266

CVE-2023-3266 affects CyberPower PowerPanel Enterprise DCIM. The vulnerability is an improperly implemented security check for standard authentication , enabling an attacker to bypass authentication when LDAP authentication is selected. An unauthenticated attacker could log in as an administrator...

CVE-2023-3266

A non-feature complete authentication mechanism exists in the production application allowing an attacker to bypass all authentication checks if LDAP authentication is selected.An unauthenticated attacker can leverage this vulnerability to log in to the CypberPower PowerPanel Enterprise as an...

Amazon Linux 2 : thunderbird (ALAS-2023-1951)

The version of thunderbird installed on the remote host is prior to 102.7.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1951 advisory. 2025-01-30: CVE-2022-31744 was added to this advisory. 2025-01-30: CVE-2022-3155 was added to this advisory...

CVE-2022-3266

CVE-2022-3266 is an out-of-bounds read in H.264 video decoding that can trigger a crash. Affected products in the provided documents include Firefox ESR < 102.3, Thunderbird < 102.3, and Firefox

CVE-2022-3266

An out-of-bounds read can occur when decoding H264 video. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR 102.3, Thunderbird 102.3, and Firefox 105...

Ubuntu: Security Advisory (USN-5724-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: MozillaThunderbird / MozillaThunderbird-translations-common / etc (SUSE-SU-2022:3800-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3800-1 advisory. - Mozilla Thunderbird 102.4.0 bsc1204421 changed: Thunderbird will automatically detect and repa...

Security fix for the ALT Linux 10 package firefox-esr version 102.3.0-alt1

Oct. 10, 2022 Pavel Vasenkov 102.3.0-alt1 - New ESR version. - Security fixes: + CVE-2022-3266 Out of bounds read when decoding H264 + CVE-2022-40959 Bypassing FeaturePolicy restrictions on transient pages + CVE-2022-40960 Data-race when parsing non-UTF-8 URLs in threads + CVE-2022-40958 Bypassin...

Security fix for the ALT Linux 10 package thunderbird version 102.3.0-alt1

Oct. 9, 2022 Pavel Vasenkov 102.3.0-alt1 - New version. - Security fixes: + CVE-2022-3266 Out of bounds read when decoding H264 + CVE-2022-40959 Bypassing FeaturePolicy restrictions on transient pages + CVE-2022-40960 Data-race when parsing non-UTF-8 URLs in threads + CVE-2022-40958 Bypassing...

Mozilla Firefox Security Advisory (MFSA2022-40) - Linux

The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2022-40. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...