6413 matches found
EUVD-2026-8480
Use-after-free in the JavaScript: GC component. This vulnerability affects Firefox 148, Firefox ESR 115.33, and Firefox ESR 140.8...
CVE-2026-2758
CVE-2026-2758 is a memory-safety use-after-free in the Mozilla Firefox JavaScript GC component. Public details show it affects Firefox and Thunderbird families and was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. Multiple connected advisorie...
WordPress ElementsKit Lite plugin < 3.7.9 - Unauthenticated Mailchimp REST Endpoint vulnerability
Unauthenticated Mailchimp REST Endpoint vulnerability discovered by Rahul Karne in WordPress Plugin ElementsKit Elementor addons Lite versions 3.7.9...
CVE-2026-1760 affecting package libsoup for versions less than 3.4.4-12
CVE-2026-1760 affecting package libsoup for versions less than 3.4.4-12. A patched version of the package is available...
CVE-2026-0994 affecting package pytorch for versions less than 2.2.2-12
CVE-2026-0994 affecting package pytorch for versions less than 2.2.2-12. A patched version of the package is available...
CVE-2026-1536 affecting package libsoup for versions less than 3.4.4-12
CVE-2026-1536 affecting package libsoup for versions less than 3.4.4-12. A patched version of the package is available...
CVE-2025-32049 affecting package libsoup for versions less than 3.4.4-12
CVE-2025-32049 affecting package libsoup for versions less than 3.4.4-12. A patched version of the package is available...
CVE-2026-1761 affecting package libsoup for versions less than 3.4.4-12
CVE-2026-1761 affecting package libsoup for versions less than 3.4.4-12. A patched version of the package is available...
CVE-2026-2004 affecting package postgresql for versions less than 16.12-1
CVE-2026-2004 affecting package postgresql for versions less than 16.12-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-2005 affecting package postgresql for versions less than 16.12-1
CVE-2026-2005 affecting package postgresql for versions less than 16.12-1. An upgraded version of the package is available that resolves this issue...
PT-2026-21728
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 148 Thunderbird versions prior to 148 Description A use-after-free issue exists in the JavaScript: GC component. This condition can occur when memory is accessed after it has been freed, potentially leading to crashes...
PT-2026-21740
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 148 Thunderbird versions prior to 148 Description The software contains memory safety bugs. Some of these bugs exhibited evidence of memory corruption, and it is presumed that, with sufficient effort, they could...
PT-2026-21689
Name of the Vulnerable Software and Affected Versions Firefox for iOS versions prior to 147.4 Description A flaw exists in Firefox for iOS that could allow malicious scripts to cause a mismatch between the address bar display and the actual web content. This could lead to a user being presented...
PT-2026-21729
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 148 Thunderbird versions prior to 148 Description A JIT miscompilation issue exists in the JavaScript: WebAssembly component. JIT Just-In-Time compilation is a method used by browsers to improve execution speed by...
PT-2026-21736
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 148 Thunderbird versions prior to 148 Description An information disclosure issue exists, along with a mitigation bypass, within the Settings UI component. Recommendations Update Firefox to version 148 or later. Updat...
PT-2026-21731
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 148 Thunderbird versions prior to 148 Description A use-after-free condition exists in the DOM Core and HTML components. This issue could allow for unexpected behavior or potential compromise. Recommendations Update...
📄 GrandStream GXP1600 Unauthenticated Remote Code Execution
An unauthenticated stack-based buffer overflow vulnerability exists in the HTTP API endpoint /cgi-bin/api.values.get. A remote attacker can leverage this vulnerability to achieve unauthenticated remote code execution RCE with root privileges on a target device. The vulnerability affects all six...
AZL-78327 CVE-2025-61143 affecting package libtiff for versions less than 4.6.0-12
libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tifopen.c...
