PT-2026-67719

Name of the Vulnerable Software and Affected Versions Puwell IP Camera versions 2.x through 4.x Description An authentication bypass exists that allows unauthenticated attackers to access device functions by sending protocol-conforming packets over TCP port 23456. By exploiting the unvalidated...

RHEL 9 : thunderbird (RHSA-2026:49921)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:49921 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Site isolation issue in the DOM:...

CVE

CloudClassroom PHP 1.0 – Authenticated Stored Cross-Site Scrip...

SUSE CVE-2026-66401

FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerability in the UVC H.264 extension-unit parser that fails to validate descriptor length before accessing the GUID field. A local attacker with a malicious USB video camera can trigger a heap read beyond allocated bounds during camera...

OPENSUSE-SU-2026:21522-1 Security update for ffmpeg-4

This update for ffmpeg-4 fixes the following issues: Changes in ffmpeg-4: - CVE-2026-64835: Out-of-Bounds Memory Access in ADX Audio Decoder bsc1272758 - CVE-2026-64832: Double-Free in NVDEC Hardware Decoder via nvdec.c bsc1272754 - CVE-2026-64830: Heap Buffer Overflow via VobSub Subtitle Demuxer...

firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Audio/Video: GMP component...

firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the WebRTC: Audio/Video component...

firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Audio/Video: cubeb component...

firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the WebRTC: Audio/Video component...

firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Audio/Video: GMP component...

firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: cubeb component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Audio/Video: cubeb component...

remove-ai-watermarks v0.23.0

Remove AI Watermarks Remove AI provenance marks from images and video you generated yourself: known visible labels such as the Gemini sparkle and vendor text marks; invisible pixel watermarks through diffusion regeneration; C2PA, EXIF, XMP, IPTC, and related AI metadata. Video support covers...

gstreamer1-plugins-good security update

1.26.7-2.2 - Fix integer overflow and bounds check vulnerabilities in uncompressed video handling CVE-2026-5056 Resolves: RHEL-222333...

Oracle Linux 10 : gstreamer1-plugins-good (ELSA-2026-49508)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-49508 advisory. 1.26.7-2.2 - Fix integer overflow and bounds check vulnerabilities in uncompressed video handling CVE-2026-5056 Resolves: RHEL-222333 Tenable has extracted th...

RHEL 10 : thunderbird (RHSA-2026:49621)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:49621 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Site isolation issue in the DOM:...

keras-video-generators-modified (0.2.0) potentially affected by CVE-2026-9335 via keras (2.5.0rc0)

keras PYPI version 2.5.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - keras-video-generators-modified 0.2.0 Source cves: CVE-2026-9335 Source advisory: OSV:GHSA-M8WH-29WM-52MV...

Deep-Live-Cam v2.7-ultimate

Deep-Live-Cam 2.1.6 Real-time face swap and video deepfake with a single click and only a single image. Disclaimer This deepfake software is designed to be a productive tool for the AI-generated media industry. It can assist artists in animating custom characters, creating engaging content, and...

Linux Distros Unpatched Vulnerability : CVE-2026-66401

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerability in the UVC H.264 extension-unit parser that fails to validate descriptor length before...

CVE-2026-66401 FreeRDP before 3.29.0 Out-of-Bounds Read via UVC H.264

FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerability in the UVC H.264 extension-unit parser that fails to validate descriptor length before accessing the GUID field. A local attacker with a malicious USB video camera can trigger a heap read beyond allocated bounds during camera...

EUVD-2026-51831

FreeRDP before 3.29.0 contains an out-of-bounds heap read vulnerability in the UVC H.264 extension-unit parser that fails to validate descriptor length before accessing the GUID field. A local attacker with a malicious USB video camera can trigger a heap read beyond allocated bounds during camera...