Mozilla多款产品 资源管理错误漏洞

Mozilla Firefox, among others, are products of the American Mozilla Foundation. Mozilla Firefox is an open-source web browser. Mozilla Firefox ESR is a extended support version of Firefox the web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla...

Tattile Cameras 1.181.5 Insufficient Token (X-User-Token) Expiration

Summary Tattile is an Italian manufacturer specializing in advanced ANPR/ALPR, traffic‑enforcement, and machine‑vision camera systems used across intelligent transportation networks, tolling infrastructures, access‑control environments, and industrial automation. Their portfolio includes...

Mozilla多款产品 安全漏洞

Mozilla Firefox, among others, are products of the American Mozilla Foundation. Mozilla Firefox is an open-source web browser. Mozilla Firefox ESR is a extended support version of Firefox the web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla...

Mozilla多款产品 资源管理错误漏洞

Mozilla Firefox, among others, are products of the American Mozilla Foundation. Mozilla Firefox is an open-source web browser. Mozilla Firefox ESR is a extended support version of Firefox the web browser. Mozilla Thunderbird is an email client software that emerged independently from the Mozilla...

PT-2026-21790

Name of the Vulnerable Software and Affected Versions Tattile Smart+, Vega, and Basic device families versions prior to 1.181.5 Description The authentication token X-User-Token in affected devices has an insufficient expiration time. An attacker obtaining a valid token through methods like...

📄 Tattile Cameras 1.181.5 Insufficient Token Expiration

Tattile Cameras version 1.181.5 suffers an insufficient session expiration. This occurs when the web application permits an attacker to reuse old session credentials or tokens for authorization. Insufficient session expiration increases the device's exposure to attacks that can steal or reuse...

CVE-2026-27492

Lettermint Node.js SDK is the official Node.js SDK for Lettermint. In versions 1.5.0 and below, email properties such as to, subject, html, text, and attachments are not reset between sends when a single client instance is reused across multiple .send calls. This can cause properties from a...

CVE-2026-27492

Lettermint Node.js SDK (npm package lettermint) is vulnerable in versions ≤ 1.5.0 where email properties (to, subject, html, text, attachments) are not reset between sends when a single client instance is reused across multiple .send() calls. This state leakage can cause content or recipient addr...

CVE-2026-27492 Lettermint Node.js SDK leaks email properties to unintended recipients when client instance is reused

Lettermint Node.js SDK is the official Node.js SDK for Lettermint. In versions 1.5.0 and below, email properties such as to, subject, html, text, and attachments are not reset between sends when a single client instance is reused across multiple .send calls. This can cause properties from a...

CVE-2026-27492 Lettermint Node.js SDK leaks email properties to unintended recipients when client instance is reused

Lettermint Node.js SDK is the official Node.js SDK for Lettermint. In versions 1.5.0 and below, email properties such as to, subject, html, text, and attachments are not reset between sends when a single client instance is reused across multiple .send calls. This can cause properties from a...

Lettermint Node.js SDK 安全漏洞

The Termint Node.js SDK is an open-source developer toolkit developed by Termint. Versions of the Termint Node.js SDK prior to 1.5.0 contain security vulnerabilities. These vulnerabilities stem from the reuse of client instances without resetting email properties, which may lead to previously sen...

CVE-2026-1842

HyperCloud versions 2.3.5 through 2.6.8 improperly allowed refresh tokens to be used directly for resource access and failed to invalidate previously issued access tokens when a refresh token was used. Because refresh tokens have a significantly longer lifetime default one year, an authenticated...

CVE-2017-4206

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

The vulnerability of the bfq_exit_icq_bfqq() function in the block/bfq-iosched.c module exposes the block-level kernel support of the Linux operating system, allowing a hacker to trigger a service failure.

The vulnerability of the bfqexiticqbfqq function in the block/bfq-iosched.c module, which supports the block-level kernel in Linux operating systems, relates to the reutilization of previously released memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-21340

Name of the Vulnerable Software and Affected Versions Lettermint Node.js SDK versions 1.5.0 and below Description The Lettermint Node.js SDK has an issue where email properties to, subject, html, text, and attachments are not reset between calls to the .send function when the same client instance...

The vulnerability of the nouveau_connector_create() function in the drivers/gpu/drm/nouveau/nouveau_connector.c file of the Nouveau driver for Direct Rendering Infrastructure (DRI) graphics cards of NVIDIA’s Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the nouveauconnectorcreate function in the drivers/gpu/drm/nouveau/nouveauconnector.c file of the Nouveau graphics driver for Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to compromise...

The vulnerability of the wb inode_writeback_end() function in the fs/fs-writeback.c file of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the wb inodewritebackend function in the fs/fs-writeback.c file of the Linux kernel file system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the dma_resv_add_fence() function in the drivers/dma-buf/dma-resv.c file of two Linux kernel cores may allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dmaresvaddfence function in the drivers/dma-buf/dma-resv.c file of two Linux kernels is related to the reutilization of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility ...

The vulnerability of the `firmwareUploadUnregister()` function in the `drivers/base/firmwareLoader/sysfsUpload.c` file of the Linux kernel’s device drivers module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the firmwareUploadUnregister function in the drivers/base/firmwareLoader/sysfsUpload.c file of the Linux kernel’s device drivers module is related to the re-use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the `__drm_kunit_helper_alloc_drm_device()` function in the Linux kernel module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the drmkunithelperallocdrmdevice function in the Linux kernel module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...