1928 matches found
Astra Linux – Vulnerability in Firefox and Thunderbird
On some systems—depending on the graphics settings and drivers—it was possible to exploit a vulnerability that allowed for reading data outside the bounds of the allocated memory space, thereby leaking memory data into the images created on the canvas element. This vulnerability affects Firefox...
Astra Linux – Vulnerability in Firefox
The ShmemCharMapHashEntry code was susceptible to potentially undefined behavior by bypassing the move semantics for one of its data members. This vulnerability affects Firefox versions less than 126...
Astra Linux – Vulnerability in Firefox
Mozilla developers reported memory safety bugs in Firefox 86. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects versions of Firefox prior to 87...
Astra Linux – Vulnerability in Firefox
In violation of the specification, cookie prefixes such as Secure were ignored if they were not capitalized correctly. According to the specification, these prefixes should be checked using a case-insensitive comparison. This could result in the browser not correctly implementing the behaviors...
Astra Linux – Vulnerability in Firefox
Service workers may reveal the script-based base URL due to dynamic import. This vulnerability affects Firefox versions earlier than 113...
Astra Linux – Vulnerability in Thunderbird
During the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated within the encrypted session. This vulnerability affects Thunderbird 78.7...
Astra Linux – Vulnerability in Thunderbird, Firefox
When using Alt-Svc, ALPN failed to properly validate certificates when the original server was redirecting to an insecure site. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbird 134, and Thunderbird 128.6...
Astra Linux – Vulnerability in Firefox and Thunderbird
Mozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs in Firefox 96 and Firefox ESR 91.5. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code...
CVE-2026-46250 affecting package kernel for versions less than 6.6.139.1-1
CVE-2026-46250 affecting package kernel for versions less than 6.6.139.1-1. A patched version of the package is available...
CVE-2026-46174 affecting package kernel for versions less than 6.6.139.1-1
CVE-2026-46174 affecting package kernel for versions less than 6.6.139.1-1. A patched version of the package is available...
CVE-2026-45912 affecting package kernel for versions less than 6.6.139.1-1
CVE-2026-45912 affecting package kernel for versions less than 6.6.139.1-1. A patched version of the package is available...
CVE-2025-71305 affecting package kernel for versions less than 6.6.139.1-1
CVE-2025-71305 affecting package kernel for versions less than 6.6.139.1-1. A patched version of the package is available...
CVE-2026-46092 affecting package kernel for versions less than 6.6.139.1-1
CVE-2026-46092 affecting package kernel for versions less than 6.6.139.1-1. A patched version of the package is available...
NPM: n8n: Legacy ExecuteWorkflow Node Bypassed File Path Restrictions
NPM: n8n: Legacy ExecuteWorkflow Node Bypassed File Path Restrictions vulnerability discovered by ? in WordPress Npm n8n versions 2.19.3...
Advisory ROSA-SA-2026-3281
software: libde265 1.0.18 OS: ROSA-CHROME unaffected versions = libde265-1.0.18-1 affected versions libde265-1.0.18-1 CVE-ID: CVE-2025-61147 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in strukturag libde265 commit d9fea9d is related to a segmentation error in the...
WordPress Games Catalog plugin <= 1.2.0 - Cross-Site Request Forgery to Arbitrary Game/Post Deletion vulnerability
Cross-Site Request Forgery to Arbitrary Game/Post Deletion vulnerability discovered by Muhammad Nur Ibnu Hubab Ibnu - Pondok Teknologi in WordPress Plugin Games Catalog versions = 1.2.0...
CVE-2026-6637 affecting package postgresql for versions less than 16.14-1
CVE-2026-6637 affecting package postgresql for versions less than 16.14-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-35469 affecting package cert-manager for versions less than 1.12.15-7
CVE-2026-35469 affecting package cert-manager for versions less than 1.12.15-7. A patched version of the package is available...
CVE-2026-6475 affecting package postgresql for versions less than 16.14-1
CVE-2026-6475 affecting package postgresql for versions less than 16.14-1. An upgraded version of the package is available that resolves this issue...