CVE-2026-19984

CVE-2026-19984 affects jkawamoto/mcp-florence2 (up to 0.3.13). The vulnerability is in the get_images function of src/mcp_florence2/init .py where the src argument is manipulated, enabling server-side request forgery (SSRF). The issue can be triggered remotely and a PoC exploit has been published...

CVE-2026-19984

A flaw has been found in jkawamoto mcp-florence2 up to 0.3.13. Affected by this issue is the function getimages of the file src/mcpflorence2/init.py. This manipulation of the argument src causes server-side request forgery. The attack may be initiated remotely. The exploit has been published and...

MINI-XR7C-Q248-FVH4

Bulletin has no description...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101137)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101137 advisory. Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbir...

PT-2026-73440

Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This issue affects Apache Tomcat: from 11.0.0 through 11.0.24, from 10.1.24 through 10.1.57, from 9.0.89 through 9.0.120. Users who have followed the security guidance to remove the examples web application...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100943)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100943 advisory. Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. Tenable h...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101098)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101098 advisory. Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. Tenable...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100963)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100963 advisory. Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Tenable h...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101359)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101359 advisory. Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100971)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100971 advisory. Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. Tenable...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101322)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101322 advisory. Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11. Tenable h...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101483)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101483 advisory. Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. Tenable h...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100934)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100934 advisory. Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12. Tenable h...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100935)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100935 advisory. Mitigation bypass in the Networking: Cache component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. Tenable...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100916)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100916 advisory. Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbi...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101337)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101337 advisory. Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5. Tenable has...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101108)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101108 advisory. Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and...

MINI-559Q-32Q9-5GJW

Bulletin has no description...

MINI-JC2R-CJCV-253M

Bulletin has no description...

CVE-2026-18385 Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.16.19 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via First Name / Last Name Profile Field

The The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.16.19. This is due to the software allowing users to execute an...