5208 matches found
CVE-2026-16359
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Audio/Video: GMP component...
CVE-2026-16350
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Audio/Video: cubeb component...
CVE-2026-16368
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the JavaScript: WebAssembly component...
CVE-2026-16357
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Graphics component...
CVE-2026-15615
Logto omits validation of the SAML element, enabling attackers to strip time and audience restrictions and replay assertions indefinitely...
EUVD-2026-48302
Logto omits validation of the SAML element, enabling attackers to strip time and audience restrictions and replay assertions indefinitely...
CVE-2026-15615 SAML <Conditions> element not validated
Logto omits validation of the SAML element, enabling attackers to strip time and audience restrictions and replay assertions indefinitely...
CVE-2026-15615
The CVE-2026-15615 issue concerns Logto’s SAML handling. The root cause is the omission of validation for the SAML element, which allows an attacker to strip time and audience restrictions and replay assertions indefinitely. This is documented in the connected sources as affecting Logto’s SAML f...
CVE-2026-63280
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager - Conditions administration did not consistently enforce tokens and component/mapped-item permissions...
CVE-2026-64794
Joomla Extension - regularlabs.com - restricted user-data exposure in Users Anywhere and Articles Anywhere extensions - User tags, filters and conditions allowed access to insufficiently restricted user fields. Crafted content could expose authentication-related data, raw user parameters or...
CVE-2026-63280
The CVE-2026-63280 entry concerns the Joomla extension Regular Labs Conditions Manager. Affected component/function: conditions administration within the extension. Root cause: inconsistent enforcement of tokens (CSRF protection) and of component/mapped-item permissions. This could enable imprope...
CVE-2026-63280 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager - Conditions administration did not consistently enforce tokens and component/mapped-item permissions...
CVE-2026-63280
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager - Conditions administration did not consistently enforce tokens and component/mapped-item permissions...
CVE-2026-63683
The CVE-2026-63683 entry concerns the Joomla extension from Regular Labs (the Regular Labs conditions manager). The description in the connected CVE records states that IP and GeoIP conditions trust spoofable forwarded headers, enabling remote clients to bypass location-based rules. The root caus...
CVE-2026-63683 Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager
Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager - IP and GeoIP conditions trusted spoofable forwarded headers, allowing remote clients to bypass location-based rules...
CVE-2026-63281
CVE-2026-63281 affects the Regular Labs Conditions Manager Joomla extension. The issue is a stored cross-site scripting (XSS) vulnerability where stored condition values can execute HTML/JavaScript in administrator summaries. This is documented in CVE records from NVD and CVE List, describing the...
CVE-2026-63281 Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager
Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager - Stored condition values could also execute HTML/JavaScript in administrator summaries...
SUSE CVE-2026-16364
Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153...
