1997 matches found
CVE-2026-23973
CVE-2026-23973 affects uxper Golo WordPress theme versions prior to 1.7.5. The issue is a Reflected XSS caused by improper neutralization of input during web page generation. Several connected sources corroborate the vulnerability in Golo
SUSE CVE-2026-4720
Memory safety bugs present in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in...
CVE-2026-3889 Spoofing issue in Thunderbird
Spoofing issue in Thunderbird. This vulnerability was fixed in Thunderbird 149 and Thunderbird 140.9...
CVE-2026-3889
Spoofing issue in Thunderbird. This vulnerability was fixed in Thunderbird 149 and Thunderbird 140.9...
CVE-2026-4685
Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...
UBUNTU-CVE-2026-4706
Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...
CVE-2026-4729
Memory safety bugs present in Firefox 148 and Thunderbird 148. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 149 and Thunderbird 149...
CVE-2026-4698
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...
PT-2026-27422
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 149 Thunderbird versions prior to 149 Description An undefined behavior issue exists in the Audio/Video component. This can lead to unexpected program behavior. Recommendations Update Firefox to version 149 or later...
WordPress Meloo theme < 2.8.2 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Meloo versions 2.8.2...
WordPress YML for Yandex Market plugin < 5.3.0 - Arbitrary File Deletion vulnerability
Arbitrary File Deletion vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin YML for Yandex Market versions 5.3.0...
WordPress Kamperen theme < 1.3 - Arbitrary Object Instantiation vulnerability
Arbitrary Object Instantiation vulnerability discovered by Denver Jackson in WordPress Theme Kamperen versions 1.3...
WordPress Goldish theme < 3.47 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Goldish versions 3.47...
Advisory ROSA-SA-2026-3226
software: grub2 2.06 WASP: ROSA-CHROME unaffected versions = grub2-2.06-26 affected versions grub2-2.06-26 CVE-ID: CVE-2025-61662 BDU-ID: 2025-14786 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the gettext module of the Grub2 operating systems boot loader is related to the ability to use memory...
WordPress Motta Addons plugin < 1.6.1 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Motta Addons versions 1.6.1...
WordPress Lumise Product Designer plugin < 2.0.9 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Jarno Vos jrn5151 in WordPress Plugin Lumise Product Designer versions 2.0.9...
CVE-2026-23941 affecting package erlang for versions less than 26.2.5.18-1
CVE-2026-23941 affecting package erlang for versions less than 26.2.5.18-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-23943 affecting package erlang for versions less than 26.2.5.18-1
CVE-2026-23943 affecting package erlang for versions less than 26.2.5.18-1. An upgraded version of the package is available that resolves this issue...
WordPress Get Use APIs plugin < 2.0.10 - Contributor+ Stored XSS vulnerability
Contributor+ Stored XSS vulnerability discovered by Ahmed Makawi in WordPress Plugin JSON Content Importer versions 2.0.10...