17931 matches found
GHSA-4C5F-9MJ4-M247 flagd: Multiple Go Runtime CVEs Impact Security and Availability
Summary In 2025, several vulnerabilities in the Go Standard Library were disclosed, impacting Go-based applications like flagd the evaluation engine for OpenFeature. These CVEs primarily focus on Denial of Service DoS through resource exhaustion and Race Conditions in database handling. | CVE ID ...
Security Bulletin: IBM® IBM Common Licensing using WebSphere Application Server and WebSphere Application Server Liberty are affected by SMTP injection due to Jakarta Mail (CVE-2025-7962)
Summary Vulnerability in javaMail-1.5, javaMail-1.6, mail-2.0, or mail-2.1 features affects IBM WebSphere Application Server Liberty 17.0.0.3 - 25.0.0.11 with specific features enabled. Following IBM® Engineering Lifecycle Management product is vulnerable to this attack, and addressed in this...
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component...
CVE-2025-66376: Improper Neutralization of Input During Web Page Generation
Zimbra Collaboration ZCS 10 before 10.0.18 and 10.1 before 10.1.13 allows Classic UI stored XSS via Cascading Style Sheets CSS @import directives in an HTML e-mail message...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2025-7962)
Summary IBM WebSphere Application Server is shipped as a component of Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas, and Maximo for Utilities, Maximo Adapter for Primavera,...
Improper Validation of Specified Type of Input
Overview yara-mail is an A Python package and command line utility for scanning emails with YARA rules Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input due to the automatic treatment of string input as a filesystem path in the...
PT-2026-6659
Name of the Vulnerable Software and Affected Versions time versions 0.3.6 through 0.3.46 rust-keylime versions prior to 0.2.8+116 python-uv-build versions prior to 0.10.2 SCCache versions prior to 0.13.0 Description The time crate provides date and time handling in Rust. Versions 0.3.6 through...
NetEase Enterprise Mail: undisclosed vulnerability (ZAI-2026-GY712R)
Not disclosed. Details are not yet publicly disclosed...
QQ Mail: undisclosed vulnerability (ZAI-2026-W444QT)
Not disclosed. Details are not yet publicly disclosed...
163 Mail: undisclosed vulnerability (ZAI-2026-C5NP0Z)
Not disclosed. Details are not yet publicly disclosed...
Yeah.net Mail: undisclosed vulnerability (ZAI-2026-ZWKAXY)
Not disclosed. Details are not yet publicly disclosed...
Aliyun Mail: undisclosed vulnerability (ZAI-2026-5XI6CS)
Not disclosed. Details are not yet publicly disclosed...
Naver Mail: undisclosed vulnerability (ZAI-2026-JFY0FV)
Not disclosed. Details are not yet publicly disclosed...
Sina Mail: undisclosed vulnerability (ZAI-2026-XPPOHW)
Not disclosed. Details are not yet publicly disclosed...
DingTalk Mail: undisclosed vulnerability (ZAI-2026-X9KRJ8)
Not disclosed. Details are not yet publicly disclosed...
Yandex Mail: undisclosed vulnerability (ZAI-2026-JL1OOR)
Not disclosed. Details are not yet publicly disclosed...
189 Mail: undisclosed vulnerability (ZAI-2026-YOKP1A)
Not disclosed. Details are not yet publicly disclosed...
Tencent Enterprise Mail: undisclosed vulnerability (ZAI-2026-523FHO)
Not disclosed. Details are not yet publicly disclosed...