Explorance Blue security vulnerabilities

Explorance Blue is a learning experience management software developed by the Canadian company Explorance. Versions of Explorance Blue prior to 8.14.9 contained security vulnerabilities. These vulnerabilities were due to insufficient input validation on the web application endpoints, which could...

Mozilla Thunderbird < 147.0.1

The version of Thunderbird installed on the remote Windows host is prior to 147.0.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2026-07 advisory. - When a user explicitly requested Thunderbird to decrypt an inline OpenPGP message that was embedded in a text section of ...

WordPress plugin: "Change WP URL" has a cross-site request forgeing vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

Dell PremierColor Panel Driver 访问控制错误漏洞

Dell PremierColor Panel Driver is a high-end monitor color management system from Dell USA. An Access Control Error vulnerability exists in Dell PremierColor Panel Driver versions prior to 1.0.0.1 A01, which stems from improper access control and can be exploited by an attacker to cause elevation...

CVE-2026-24909

vlt before 1.0.0-rc.10 mishandles path sanitization for tar, leading to path traversal during extraction...

firefox: thunderbird: Use-after-free in the JavaScript Engine component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript Engine component...

CVE-2026-24868

CVE-2026-24868 describes a mitigation bypass in Firefox’s Privacy: Anti-Tracking component, affecting Firefox versions earlier than 147.0.2. The vulnerability is tied to a bypass of mitigation controls in the Anti-Tracking module; no exploit vectors or root-cause details are provided in the suppl...

CVE-2026-24869 Use-after-free in the Layout: Scrolling and Overflow component

Use-after-free in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 147.0.2...

CVE-2026-24875 Integer overflow in modizer

Integer Overflow or Wraparound vulnerability in yoyofr modizer.This issue affects modizer: before 4.1.1...

EUVD-2026-4810

Access of Resource Using Incompatible Type 'Type Confusion' vulnerability in themrdemonized xray-monolith.This issue affects xray-monolith: before 2025.12.30...

CVE-2026-24870 Information disclosure in ixray-1.6-stcop

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ixray-team ixray-1.6-stcop.This issue affects ixray-1.6-stcop: before 1.3...

EUVD-2026-4840

Integer Overflow or Wraparound vulnerability in Ralim IronOS.This issue affects IronOS: before v2.23-rc2...

CVE-2026-24827

CVE-2026-24827 is an Out-of-bounds Write vulnerability in gerstrong Commander-Genius. The issue affects Commander-Genius prior to Release refs/pull/358/merge. Connected data indicates the Lua package is affected for versions less than 5.4.4-2, with a patched package available (Lua 5.4.4-2 or newe...

CVE-2026-24816

The CVE-2026-24816 issue affects the datavane tis project (tis-console) and is described as a Loop with Unreachable Exit Condition (an “infinite loop”) in ChangeDomainAction.Java. Affected version range is tis before v4.3.0. The Red Hat, NVD, CIRCL, OSV, and other feeds consistently reference the...

CVE-2026-24799

Out-of-bounds Write, Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in davisking dlib dlib/external/zlib modules. This vulnerability is associated with program files inflate.C. This issue affects dlib: before v19.24.9...

CVE-2026-24799

CVE-2026-24799 affects davisking/dlib (dlib/external/zlib) with an out-of-bounds write in inflate.C. Affected versions are before v19.24.9; the vulnerability is triggered via a classic buffer overflow in a local context (attack vector: local, complexity: low, privileges: low, user interaction: ac...

firefox: thunderbird: Clickjacking issue, information disclosure in the PDF Viewer component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue, information disclosure in the PDF Viewer component...

PT-2026-5037

Name of the Vulnerable Software and Affected Versions StudioCMS versions prior to 0.2.0 Description StudioCMS contains a Broken Object Level Authorization BOLA vulnerability in the Content Management feature. This allows users with the "Visitor" role to access draft content created by Editor,...

PT-2026-4961

improper pointer arithmetic vulnerability in ProjectSkyfire SkyFire 548.This issue affects SkyFire 548: before 5.4.8-stable5...

Dell CloudBoost Virtual Appliance security vulnerabilities

Dell CloudBoost Virtual Appliance is a storage solution software developed by the American company Dell. Versions of Dell CloudBoost Virtual Appliance prior to 19.14.0.0 contained security vulnerabilities. These vulnerabilities stemmed from the storage of plaintext passwords, which could lead to...