53882 matches found
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component...
firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume th...
firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component...
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component...
CVE-2026-40884
creationtimestamp| type| source ---|---|--- 2026-04-13 07:56:55+00:00| published-proof-of-concept| https://github.com/patrickhener/goshs/security/advisories/GHSA-c29w-qq4m-2gcv 2026-04-17 02:29:24+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mjnuvsllad2g 2026-04-20 23:27:34+00:0...
CVE-2026-0233 Autonomous Digital Experience Manager: Improper validation of ADEM certificate
A certificate validation vulnerability in Palo Alto Networks Autonomous Digital Experience Manager on Windows allows an unauthenticated attacker with adjacent network access to execute arbitrary code with NT AUTHORITY\SYSTEM privileges...
CVE-2026-0234 Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration
An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources...
CVE-2026-0234
CVE-2026-0234 affects Cortex XSOAR and Cortex XSIAM in the Microsoft Teams integration. The vulnerability arises from improper verification of cryptographic signatures, allowing an unauthenticated actor to access and modify protected resources. Technical details in PT-Security and vendor advisori...
CVE-2026-0234 Cortex XSOAR: Improper Verification of Cryptographic Signature in Microsoft Teams integration
An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft Teams that enables an unauthenticated user to access and modify protected resources...
EUVD-2026-21796
Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-34852
Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-34852
Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-34852
Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-34852
Stack overflow vulnerability in the media platform. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-34852
Huawei HarmonyOS: CVE-2026-34852 is a stack overflow vulnerability reported in the HarmonyOS media platform. CNVD and NVD describe a stack overflow in the media platform that can be exploited to affect availability. EUVD corroborates the stack overflow issue in the media platform with availabilit...
EUVD-2026-21781
Stored Cross Site Scripting in NightWolf Penetration Testing Platform allows attack trigger and run malicious script in user's browser...
CVE-2026-6179
Stored Cross Site Scripting in NightWolf Penetration Testing Platform allows attack trigger and run malicious script in user's browser...
perl-xml-parser: XML::Parser: Memory corruption via deeply nested XML files
A flaw was found in XML::Parser, a Perl module for parsing XML. This vulnerability, an off-by-one heap buffer overflow, occurs when processing an XML file with very deep element nesting. A remote attacker could exploit this by providing a specially crafted XML file, potentially leading to memory...
CVE-2026-6179 Stored Cross Site Scripting in NightWolf Penetration Testing Platform
Stored Cross Site Scripting in NightWolf Penetration Testing Platform allows attack trigger and run malicious script in user's browser...
CVE-2026-6179 Stored Cross Site Scripting in NightWolf Penetration Testing Platform
Stored Cross Site Scripting in NightWolf Penetration Testing Platform allows attack trigger and run malicious script in user's browser...