35108 matches found
EUVD-2026-37894
A broken authorization boundary in the RTSP media delivery pipeline of Shenzhen Liandian Communication Technology LTD V380 IP Camera firmware AppFHE1V1.0.6.020230803 enables unauthenticated network actors to bypass the device’s credential-enforced live-view workflow and directly retrieve real-tim...
CVE-2026-11784
The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.6. This is due to missing or incorrect nonce validation on the replacefile function. This makes it...
CVE-2026-11784 Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization <= 4.2.6 - Cross-Site Request Forgery via 'optml_replace_file' AJAX Action
The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.6. This is due to missing or incorrect nonce validation on the replacefile function. This makes it...
CVE-2026-50034
creationtimestamp| type| source ---|---|--- 2026-06-18 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-169-01 2026-06-18 20:07:56+00:00| seen| https://bsky.app/profile/boredchilada.bsky.social/post/3molmxpdsxc2g...
SUSE CVE-2026-12450
Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...
SUSE CVE-2026-12462
Use after free in Media in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
SUSE CVE-2026-53703
A vulnerability was found in the GStreamer RealMedia demuxer gst-plugins-ugly. When processing a RealMedia .rm file, the demuxer parses MDPR media properties chunks to configure audio streams. For audio stream header versions 4 and 5, the parser reads fields such as codec type, packet size, sampl...
PT-2026-50856
These are all security issues fixed in the containerized-data-importer-1.65-api-1.65.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-50694
Name of the Vulnerable Software and Affected Versions AutoGPT versions prior to 0.6.63 Description AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. The AddAudioToVideoBlock function downloads and stores video and audio file...
PT-2026-50855
These are all security issues fixed in the alloy-1.17.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11059-1 lemon-3.53.2-2.1 on GA media
These are all security issues fixed in the lemon-3.53.2-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11055-1 firefox-esr-140.12.0-1.1 on GA media
These are all security issues fixed in the firefox-esr-140.12.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11053-1 alloy-1.17.0-1.1 on GA media
These are all security issues fixed in the alloy-1.17.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-50857
These are all security issues fixed in the firefox-esr-140.12.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11054-1 containerized-data-importer-1.65-api-1.65.0-1.1 on GA media
These are all security issues fixed in the containerized-data-importer-1.65-api-1.65.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11052-1 MozillaFirefox-152.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-152.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11058-1 python311-starlette-1.3.1-1.1 on GA media
These are all security issues fixed in the python311-starlette-1.3.1-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-48142
creationtimestamp| type| source ---|---|--- 2026-06-17 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1927 2026-06-17 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1929 2026-06-18 13:10:33+00:00| seen|...
DRUPAL-CORE-2026-008
The Media module comes with support for oEmbed. The oEmbed specification contains two discovery mechanisms, via providers.json and via URL discovery. The URL discovery code could be leveraged to trick Drupal into making server-side requests to any URL...