EUVD-2026-69059

This vulnerability exists in the ERP system due to exposure of repository information through a publicly accessible .git directory. An unauthenticated remote attacker could exploit this vulnerability by accessing the exposed .git directory and retrieving repository metadata and associated files,...

EUVD-2026-69057

This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating parameter which could lead to exposure of sensitive information belonging to other users o...

CVE-2026-84148

This vulnerability is an Insecure Direct Object Reference (IDOR) in the Manacle Technologies ERP System . The root cause is improper authentication and authorization controls in an API endpoint, allowing an unauthenticated remote attacker to manipulate a parameter and expose sensitive information...

CVE-2026-84148 Insecure Direct Object Reference Vulnerability in Manacle Technologies ERP System

This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating parameter which could lead to exposure of sensitive information belonging to other users o...

CVE-2026-53682

Dogtag PKI (pki-core) exposes the Security Domain hosts inventory via the REST endpoint GET /ca/rest/securityDomain/hosts without requiring authentication (no principal, client certificate, or session). An unauthenticated client can receive a structured response enumerating internal PKI/CA hosts ...

CVE-2026-53682 Pki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hosts

An unauthenticated client can query the Security Domain hosts inventory via GET /ca/rest/securityDomain/hosts and receive a structured response enumerating internal PKI/CA hosts and roles security domain topology and participating subsystems, without requiring a principal, client certificate, or...

EUVD-2026-69056

An unauthenticated client can query the Security Domain hosts inventory via GET /ca/rest/securityDomain/hosts and receive a structured response enumerating internal PKI/CA hosts and roles security domain topology and participating subsystems, without requiring a principal, client certificate, or...

EUVD-2026-69080

Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

CVE-2026-84132

CVE-2026-84132 is an information disclosure vulnerability in the Networking: HTTP component of Mozilla's Firefox and Thunderbird products. A remote attacker with no privileges and no user interaction can obtain sensitive information, resulting in high confidentiality impact with no integrity or a...

CVE-2026-84132 Information disclosure in the Networking: HTTP component

Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

CVE-2026-84132

Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

EUVD-2026-69079

Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

CVE-2026-84130

Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

CVE-2026-84130

CVE-2026-84130 is an information disclosure vulnerability in the Graphics: WebGPU component of Mozilla Firefox , Firefox ESR , Thunderbird , and Thunderbird ESR . The flaw can be exploited remotely to obtain sensitive information . The CVSS 3.1 score is 7.5 (HIGH) with a network attack vector, lo...

CVE-2026-84130 Information disclosure in the Graphics: WebGPU component

Information disclosure in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

CVE-2026-84127 Information disclosure in the WebExtensions component in Firefox for Android

Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155...

CVE-2026-84127

CVE-2026-84127 is an information disclosure vulnerability in the WebExtensions component of Firefox for Android . A remote attacker with user interaction could potentially access sensitive data , resulting in a low confidentiality impact . The CNA-assigned CVSS v3.1 score is 4.3 (Medium) (AV:N/AC...

CVE-2026-84127 Information disclosure in the WebExtensions component in Firefox for Android

Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155...

EUVD-2026-69076

Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 155...

RLSA-2026:61625 Moderate: gzip security update

The gzip packages contain the gzip GNU zip data compression utility. gzip is used to compress regular files. It replaces them with files containing the .gz extension, while retaining ownership modes, access, and modification times. Security Fixes: gzip: gzip: Arbitrary file overwrite via insecure...