20640 matches found
Linux Distros Unpatched Vulnerability : CVE-2018-14553
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gdImageClone in gd.c in libgd 2.1.0-rc2 through 2.2.5 has a NULL pointer dereference allowing attackers to crash an application via a specific function call...
CVE-2025-9478
Use after free in ANGLE in Google Chrome prior to 139.0.7258.154 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...
CVE-2025-9478
Use after free in ANGLE in Google Chrome prior to 139.0.7258.154 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...
firefox: thunderbird: Denial-of-service due to out-of-memory in the Graphics: WebRender component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Denial-of-service due to out-of-memory in the Graphics: WebRender component...
Important: Red Hat Security Advisory: thunderbird security update
An update for thunderbird is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
CVE-2025-57810 jsPDF Parsing of Corrupt PNGs Leads to Potential Denial of Service (DoS)
jsPDF is a library to generate PDFs in JavaScript. Prior to 3.0.2, user control of the first argument of the addImage method results in CPU utilization and denial of service. If given the possibility to pass unsanitized image data or URLs to the addImage method, a user can provide a harmful PNG...
CVE-2025-7776
CVE-2025-7776 is a memory overflow vulnerability in Citrix NetScaler ADC/NetScaler Gateway. Affected when Gateway or AAA Vservers are used and a PCoIP Profile is bound to the NetScaler, enabling memory corruption that leads to unpredictable behavior and Denial of Service. Remediation requires upg...
gdk‑pixbuf: Heap‑buffer‑overflow in gdk‑pixbuf
A flaw exists in gdk‑pixbuf within the gdkpixbufjpegimageloadincrement function io-jpeg.c and in glib’s gbase64encodestep glib/gbase64.c. When processing maliciously crafted JPEG images, a heap buffer overflow can occur during Base64 encoding, allowing out-of-bounds reads from heap memory,...
Linux Distros Unpatched Vulnerability : CVE-2025-31181
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in gnuplot. The X11graphics function may lead to a segmentation fault and cause a system crash. CVE-2025-31181 Note that Nessus relies on the...
FreeBSD : Mozilla -- DoS in WebRender (f994cea5-7eb0-11f0-ba14-b42e991fc52e)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f994cea5-7eb0-11f0-ba14-b42e991fc52e advisory. [email protected] reports: 'Denial-of-service due to out-of-memory in the Graphics: WebRender...
FreeBSD : Mozilla -- Same-origin policy bypass (f6219d24-7eb0-11f0-ba14-b42e991fc52e)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f6219d24-7eb0-11f0-ba14-b42e991fc52e advisory. [email protected] reports: 'Same-origin policy bypass in the Graphics: Canvas2D component.' Tenable...
Security Bypass Vulnerability in Multiple Mozilla Products (CNVD-2025-26895)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S.A. Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is email client software that supports the IMAP and POP mail protocols as well as the HTML mail format. A...
PT-2025-34787 · Jspdf · Jspdf
Name of the Vulnerable Software and Affected Versions: jsPDF versions prior to 3.0.2 Description: jsPDF is a JavaScript library used to generate PDFs. Prior to version 3.0.2, user control over the first argument of the addImage method can lead to high CPU utilization and denial of service...
Linux Distros Unpatched Vulnerability : CVE-2018-3979
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A remote denial-of-service vulnerability exists in the way the Nouveau Display Driver the default Ubuntu Nvidia display driver handles GPU shader execution. A...
Linux Distros Unpatched Vulnerability : CVE-2022-41704
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue affects Apache XML Graphics prior to 1.16...
Linux Distros Unpatched Vulnerability : CVE-2023-45935
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Qt 6 through 6.6 was discovered to contain a NULL pointer dereference via the function QXcbConnection::initializeAllAtoms. NOTE: this is disputed because it is...
SUSE CVE-2023-6204
On some systems-depending on the graphics settings and drivers-it was possible to force an out-of-bounds read and leak memory data into the images created on the canvas element. This vulnerability affects Firefox 120, Firefox ESR 115.5.0, and Thunderbird 115.5...
CVE-2025-50129
A memory corruption vulnerability exists in the PCX Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. When decoding the image data from a specially crafted .tga file, a heap-based buffer overflow can occur which allows for remote code execution. An attacker will need to...
thunderbird: firefox: Same-origin policy bypass in the Graphics: Canvas2D component
A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Graphics: Canvas2D component...
