500077 matches found
KLA91163 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Denial of service...
PT-2026-62418
Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow in the set ap param command handled by the /localcfg endpoint. An authenticated attacker can supply oversized input, resulting in denial of service and potentially arbitrary code execution...
Mozilla -- Memory safety bugs
https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/CVE-2026-16360 reports: Memory safety bugs present in Firefox ESR 115.37, Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been...
Security update for vim (important)
openSUSE security update: security update for vim ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21374-1 Rating: important References: bsc1271193 bsc1271194 bsc1271195 Cross-References: CVE-2026-59856 CVE-2026-59857 CVE-2026-59858 CVSS scores:...
Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability
Langflow contains an inclusion of functionality from untrusted control sphere vulnerability that allows remote attackers to execute arbitrary code on affected installations...
DD-WRT Stack-Based Buffer Overflow Vulnerability
DD-WRT contains a stack-based buffer overflow vulnerability that could allow an unauthenticated attacker to overflow an internal buffer used by UPnP and trigger a code execution vulnerability...
WordPress Core Interpretation Conflict Vulnerability
WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL Injection and achieve Remote Code Execution. This vulnerability can be chained with CVE-2026-60137...
Linux Distros Unpatched Vulnerability : CVE-2026-63030
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the authornotin WPQuery...
PT-2026-62084
Name of the Vulnerable Software and Affected Versions DayuanJiang next-ai-draw-io version 0.4.13 Description A Cross Site Scripting XSS issue allows a remote attacker to execute arbitrary code. This is achieved by manipulating the mcp parameter. Recommendations At the moment, there is no...
PT-2026-61967
Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U affected versions not specified Description SolarWinds Serv-U contains an insecure direct object reference IDOR flaw, which occurs when an application provides direct access to objects based on user-supplied input. This issue...
PT-2026-61970
Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U affected versions not specified Description SolarWinds Serv-U contains a privilege escalation flaw that allows a group to elevate its access to system administrator levels. This can lead to arbitrary code execution with root...
Malicious code in faust-cont (npm)
The npm package faust-cont is a supply-chain dropper disguised as a benign CLI tool index.js is a decoy that only logs "cli tool install package loaded". The real behaviour is placed in an install script. An install lifecycle hook install: node install.js executes automatically on npm install,...
PT-2026-62038
Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description An authenticated path traversal vulnerability exists in AOS-CX. This issue allows an attacker to copy arbitrary files to a user-readable location via the command line interface of the underlyi...
PT-2026-62073
Name of the Vulnerable Software and Affected Versions bytebot-ai affected versions not specified Description An issue allows attackers to execute arbitrary code by providing a crafted path to the computer write file function. Recommendations At the moment, there is no information about a newer...
PT-2026-61872
Name of the Vulnerable Software and Affected Versions Firefox ESR version 115.37 Firefox ESR version 140.12 Firefox version 152 Thunderbird ESR version 140.12 Thunderbird version 152 Description Memory safety bugs were identified that showed evidence of memory corruption. These issues could...
PT-2026-63585
Name of the Vulnerable Software and Affected Versions fastjson versions 1.2.68 through 1.2.83 Description A remote code execution RCE issue exists in the fastjson library, specifically impacting Spring Boot applications. This flaw allows an unauthenticated attacker to execute arbitrary code with...
PT-2026-61964
Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U affected versions not specified Description SolarWinds Serv-U contains an insecure direct object reference IDOR flaw, which occurs when an application provides direct access to objects based on user-supplied input. This issue...
PT-2026-61962
Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U affected versions not specified Description An insecure direct object reference IDOR issue allows an attacker with group administrator access to achieve privilege escalation and remote code execution as root. IDOR is a type o...
Security Vulnerabilities fixed in Firefox 153 — Mozilla
Memory safety bugs present in Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. Memory safety bugs present in Firefox ESR 140.12 and Firefox 152. Some of these bugs showed...
