1525 matches found
thunderbird security update
An update is available for thunderbird. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...
OESA-2025-2099 thunderbird security update
Security Fixes: On 64-bit platforms, IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack, while Baseline-JIT read the entire 64 bits. This vulnerability affects Firefox 141, Firefox ESR 115.26, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13,...
CVE-2025-58351
Outline versions 0.72.0–0.83.0 include a local file storage feature that can bypass CSP and Content-Type checks when FILE_STORAGE=local is used on the same domain. A malicious payload uploaded as a file attachment could be executed in another user’s context. This is fixed in version 0.84.0. The c...
Linux Distros Unpatched Vulnerability : CVE-2022-22577
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An XSS Vulnerability in Action Pack = 5.2.0 and = 5.2.0 and 5.2.0 that could allow an attacker to bypass CSP for non HTML like responses. CVE-2022-22577 Note th...
Linux Distros Unpatched Vulnerability : CVE-2025-27404
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an...
Linux Distros Unpatched Vulnerability : CVE-2025-27609
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. A vulnerability in versions prior to 2.11.5 and 2.12.13 allows an...
GNU libcdio csp_usart_open function buffer overflow vulnerability
GNU libcdio is an American GNU community library for CD-ROM and CD image access. A buffer overflow vulnerability exists in GNU libcdio version 2.0, which stems from a failure of the cspusartopen function to properly validate the length size of the input data, and can be exploited by an attacker t...
Malicious code in phixius-nacha-csp-service-api (npm)
The package phixius-nacha-csp-service-api was found to contain malicious code...
MAL-2025-17783 Malicious code in csp-presets-pack (npm)
The package csp-presets-pack was found to contain malicious code...
MAL-2025-17782 Malicious code in csp-daemon-notifications-queue (npm)
The package csp-daemon-notifications-queue was found to contain malicious code...
MAL-2025-29131 Malicious code in phixius-nacha-csp-service-api (npm)
The package phixius-nacha-csp-service-api was found to contain malicious code...
Malicious code in csp-presets-pack (npm)
The package csp-presets-pack was found to contain malicious code...
Malicious code in csp-daemon-notifications-queue (npm)
The package csp-daemon-notifications-queue was found to contain malicious code...
Malicious code in express-yandex-csp (npm)
The package express-yandex-csp was found to contain malicious code...
MAL-2025-20092 Malicious code in express-yandex-csp (npm)
The package express-yandex-csp was found to contain malicious code...
Linux Distros Unpatched Vulnerability : CVE-2019-11738
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If a Content Security Policy CSP directive is defined that uses a hash-based source that takes the empty string as input, execution of any javascript: URIs will...
ALSA-2025:13676 Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Large branch table could lead to truncated instruction CVE-2025-8028 firefox: thunderbird: Memory safety bugs CVE-2025-8035 firefox: thunderbird: Incorrect URL stripping in CSP reports CVE-2025-80...
UBUNTU-CVE-2025-51823
libcsp 2.0 is vulnerable to Buffer Overflow in the cspethinit function due to improper handling of the ifname parameter. The function uses strcpy to copy the interface name into a structure member ctx-name without validating the input length...
firefox: thunderbird: Incorrect URL stripping in CSP reports
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: The username:password part is incorrectly stripped from URLs in CSP reports, potentially leaking HTTP Basic Authentication credentials...
firefox: thunderbird: Incorrect URL stripping in CSP reports
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: The username:password part is incorrectly stripped from URLs in CSP reports, potentially leaking HTTP Basic Authentication credentials...