Firefox Thunderbird Security Bypass

Vulnerability of the DOM component: The security of Firefox web browser and Thunderbird email client is related to the lack of data security mechanisms. Exploiting this vulnerability allows a malicious actor to access confidential data and compromise its integrity...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the functions ioam6fillTraceData and ioam6fillTraceData in the net/ipv6/ioam6.c module of the Linux operating system is related to integer overflow. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibilit...

Firefox WebAssembly XSS

JavaScript component vulnerability: Firefox’s WebAssembly browser is vulnerable due to the implementation of incorrect flow control. Exploiting this vulnerability could allow a remote attacker to access sensitive data and compromise its integrity...

Cookies Component Firefox Thunderbird DoS

The vulnerability of the Cookies component in the Firefox web browser and the Thunderbird email client is related to the reliance on cookies without any checks for their authenticity and integrity. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Playback Component Firefox Thunderbird Data Compromise

The vulnerability of the Playback component in the Firefox web browser and the Thunderbird email client is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to compromise data integrity remotely...

Firefox Popup Blocker Thunderbird Data Compromise

The vulnerability of the Popup Blocker component in the Firefox web browser and Thunderbird email client is related to the false representation of critical information to the user interface. Exploiting this vulnerability could allow a malicious actor to compromise data integrity remotely...

Broadcom Linux Wireless Driver

The vulnerability in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c file of the Broadcom wireless adapter driver for the Linux operating system is related to an improper check of a specified index, position, or offset in the input data. Exploiting this vulnerability could allow an...

Linux Bluetooth SMP smp_cmdPairingReq Buffer Overflow

The vulnerability of the smpcmdPairingReq function in the net/bluetooth/smp.c module of the Linux operating system is related to insufficient security checks for protected connections. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

Linux kernel tls_swCancelWorkTx function Data Compromise

The vulnerability of the tlsswCancelWorkTx function in the net/tls/tlssw.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of...

PT MaxPatrol Privilege Bypass

The vulnerability of the PT MaxPatrol 10 security control system is related to access control errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity and confidentiality of the protected data...

WebExtensions Component Firefox Thunderbird Data Compromise

The vulnerability of the WebExtensions component in the Firefox web browser and the Thunderbird email client involves bypassing authentication processes through spearfishing. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

Kubernetes Gateway API Provider Data Compromise

The vulnerabilities in the files pkg/provider/kubernetes/gateway/httproute.go, grpcroute.go, tcproute.go, and tlsroute.go of the Kubernetes Gateway API reverse proxy server Containous Traefik are related to the use of resources with similar identifiers. Exploiting these vulnerabilities allows a...

Smb File System Heap Buffer Overflow DoS

The vulnerability of the smb2calcmaxoutbuflen function in the fs/smb/server/smb2pdu.c module of the Smb file system in the Linux operating system is related to incorrect calculation of buffer size during packet processing. Exploiting this vulnerability allows an attacker to compromise the...

CVE-2026-72907: Improper Authorization

ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.111.0 and 16.22.0, the addac function in erpnext/accounts/utils.py accepts the ignorepermissions argument without enforcing Account create permission, allowing an authenticated limited user to create unauthorized...

Linux kernel __xfrm_state_delete Heap Buffer Overflow DoS

The vulnerability of the xfrmstatedelete function in the net/xfrm/xfrmstate.c module, which is part of the Linux kernel’s networking functions, relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Photon OS 5.0: Openjdk21 PHSA-2026-5.0-90-0763

An update of the openjdk21 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0763. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2026-76482

Summary On standard channels, the message update and delete handlers accepted any caller holding write access on the channel, without checking that the caller wrote the message. Write access is the same grant a member needs in order to post, so every ordinary participant in a shared channel could...

CVE-2026-12339: Improper Limitation of a Pathname to a Restricted Directory

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to be overwritten...

Photon OS 5.0: Syslog PHSA-2025-5.0-91-0521

An update of the syslog package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0521. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Open PHSA-2023-5.0-91-0085

An update of the open package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0085. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...