Lucene search
K

7061 matches found

Github Security Blog
Github Security Blog
added 2026/03/24 4:50 p.m.6 views

Craft CMS is Vulnerable to Authenticated Remote Code Execution via Malicious Attached Behavior

Summary A Remote Code Execution RCE vulnerability exists in Craft CMS 5.x and 4.x that bypasses the security fixes for GHSA-7jx7-3846-m7w7 and GHSA-255j-qw47-wjh5. This vulnerability can be exploited by any authenticated user with control panel access. The existing patches add cleanseConfig to...

8.6CVSS5.9AI score0.0102EPSS
Exploits1References7Affected Software1
EUVD
EUVD
added 2026/03/24 3:30 p.m.2 views

EUVD-2026-14863

Undefined behavior in the Audio/Video component. This vulnerability affects Firefox 149...

5.8AI score0.00388EPSS
Exploits0References3
EUVD
EUVD
added 2026/03/24 3:30 p.m.2 views

EUVD-2026-14851

Undefined behavior in the WebRTC: Signaling component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...

5.8AI score0.00299EPSS
Exploits0References4
EUVD
EUVD
added 2026/03/24 3:30 p.m.5 views

EUVD-2026-14825

Undefined behavior in the WebRTC: Signaling component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...

9.8CVSS5.8AI score0.00418EPSS
Exploits0References4
NVD
NVD
added 2026/03/24 1:16 p.m.2 views

CVE-2026-4724

Undefined behavior in the Audio/Video component. This vulnerability was fixed in Firefox 149 and Thunderbird 149...

9.1CVSS0.00388EPSS
Exploits0References3
NVD
NVD
added 2026/03/24 1:16 p.m.3 views

CVE-2026-4718

Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

8.1CVSS0.00299EPSS
Exploits0References5
NVD
NVD
added 2026/03/24 1:16 p.m.3 views

CVE-2026-4705

Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

9.8CVSS0.00418EPSS
Exploits0References5
OSV
OSV
added 2026/03/24 1:16 p.m.2 views

UBUNTU-CVE-2026-4724

Undefined behavior in the Audio/Video component. This vulnerability was fixed in Firefox 149 and Thunderbird 149...

9.1CVSS7.2AI score0.00388EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/03/24 12:30 p.m.18 views

CVE-2026-4718 Undefined behavior in the WebRTC: Signaling component

Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

0.00299EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/03/24 12:30 p.m.5 views

CVE-2026-4718 Undefined behavior in the WebRTC: Signaling component

Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

7.2AI score0.00299EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/03/24 12:30 p.m.22 views

CVE-2026-4705 Undefined behavior in the WebRTC: Signaling component

Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

0.00418EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/03/24 12:30 p.m.4 views

CVE-2026-4705 Undefined behavior in the WebRTC: Signaling component

Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

7.2AI score0.00418EPSS
Exploits0References5
CVE
CVE
added 2026/03/24 12:30 p.m.15 views

CVE-2026-4705

CVE-2026-4705 is an undefined-behavior issue in the WebRTC: Signaling component. Public disclosures in the initial document indicate the vulnerability affected Firefox and Thunderbird products, with patches delivered in Firefox 149 / ESR 140.9 and Thunderbird 149 / 140.9. The accompanying connect...

9.8CVSS7.2AI score0.00418EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2026/03/24 12:30 p.m.17 views

CVE-2026-4724 Undefined behavior in the Audio/Video component

Undefined behavior in the Audio/Video component. This vulnerability was fixed in Firefox 149 and Thunderbird 149...

0.00388EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/03/24 12:30 p.m.1 views

CVE-2026-4724

Undefined behavior in the Audio/Video component. This vulnerability was fixed in Firefox 149 and Thunderbird 149...

9.1CVSS7.2AI score0.00388EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2026/03/24 12:30 p.m.3 views

CVE-2026-4724

Undefined behavior in the Audio/Video component. This vulnerability was fixed in Firefox 149 and Thunderbird 149...

9.1CVSS7.9AI score0.00388EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2026/03/24 12:30 p.m.3 views

CVE-2026-4724

Undefined behavior in the Audio/Video component. This vulnerability was fixed in Firefox 149 and Thunderbird 149...

9.1CVSS7.2AI score0.00388EPSS
Exploits0References3
CVE
CVE
added 2026/03/24 12:30 p.m.13 views

CVE-2026-4724

CVE-2026-4724 affects Mozilla Firefox and Mozilla Thunderbird. The root cause is undefined behavior in the Audio/Video component, leading to potential security bypass or other impacts as described in the connected records. The vulnerability is reported across multiple sources (CNVD EUVD entries) ...

9.1CVSS7.2AI score0.00388EPSS
Exploits0References3Affected Software2
Positive Technologies
Positive Technologies
added 2026/03/24 12:0 a.m.4 views

PT-2026-27303

Name of the Vulnerable Software and Affected Versions Mod gnutls versions prior to 0.13.0 Description Mod gnutls, a TLS module for Apache HTTPD based on GnuTLS, had an issue where the code for client certificate verification did not validate the key purpose as defined in the Extended Key Usage...

6.8CVSS5.9AI score0.00205EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/03/24 12:0 a.m.5 views

Tibco ActiveMatrix BusinessWorks和Tibco Enterprise Administrator 安全漏洞

Tibco ActiveMatrix BusinessWorks and Tibco Enterprise Administrator are both products of the American company Tibco. Tibco ActiveMatrix BusinessWorks is an integrated platform software for enterprise application integration and service orchestration. Tibco Enterprise Administrator is a management...

8.7CVSS5.8AI score0.00333EPSS
Exploits0References1
Rows per page
Query Builder