45829 matches found
CVE-2026-12315 Mitigation bypass in the DOM: Security component
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12...
CVE-2026-10825
A denial-of-service vulnerability exists in the WebSocket API due to insufficient validation and handling of JSON-based requests. A low-privileged authenticated attacker can send a specially crafted request that causes service disruption and may result in an unexpected device reboot...
firefox: thunderbird: Use-after-free in the DOM: Bindings (WebIDL) component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Bindings WebIDL component...
CVE-2026-10780
CVE-2026-10780 affects the WordPress Static Block plugin (versions up to 2.2). The vulnerability is an Insecure Direct Object Reference in the static_block_content() shortcode handler, which retrieves a post with get_post() using an attacker-controlled id and outputs its post_content without vali...
CVE-2026-10780 Static Block <= 2.2 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via Shortcode 'id' Attribute
The Static Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2. This is due to the staticblockcontent shortcode handler retrieving a post via getpost using an attacker-supplied 'id' attribute and outputting its postcontent without...
EUVD-2026-37034
The Static Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2. This is due to the staticblockcontent shortcode handler retrieving a post via getpost using an attacker-supplied 'id' attribute and outputting its postcontent without...
Chromium: CVE-2026-11689 Insufficient validation of untrusted input in Passwords
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
PT-2026-50098
Unauthenticated PHP Object Injection in Alloggio - Hotel Booking = 2.1.2 versions...
PT-2026-49611
Name of the Vulnerable Software and Affected Versions Static Block versions prior to 2.3 Description The Static Block plugin for WordPress contains an Insecure Direct Object Reference. This occurs because the static block content shortcode handler uses the get post function to retrieve a post bas...
PT-2026-49668
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 152 Firefox ESR versions prior to 140.12 Firefox ESR versions prior to 115.37 Thunderbird versions prior to 152 Thunderbird versions prior to 140.12 Description JIT miscompilation occurs in the DOM: Core & HTML...
PT-2026-50112
Unauthenticated PHP Object Injection in Ashtanga = 1.2 versions...
PT-2026-50116
Unauthenticated PHP Object Injection in Esmée = 1.4 versions...
PT-2026-50113
Unauthenticated PHP Object Injection in Roisin = 1.4 versions...
PT-2026-50103
Unauthenticated PHP Object Injection in NeoBeat = 1.7 versions...
PT-2026-50108
Unauthenticated PHP Object Injection in Micdrop = 1.3.1 versions...
PT-2026-50118
Unauthenticated PHP Object Injection in Valeska = 1.2.2 versions...
PT-2026-50095
Unauthenticated PHP Object Injection in Kapee 1.7.0 versions...
PT-2026-50104
Unauthenticated PHP Object Injection in Santé = 1.5.1 versions...