Lucene search
+L

12967 matches found

OSV
OSV
added 2026/03/25 5:05 a.m.14 views

MAL-2026-2171 Malicious code in globally (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1f2d16dd9f9dc8f8c54504946e96b931fab9f6c893012e17b0c03dd531c49f5b Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/03/25 5:05 a.m.11 views

Malicious code in v2-8-3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b90faec9a57b74163b9282007ed27f9602abf0d5307115928eb4ca75d98f8c72 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

6AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/03/25 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-23291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: pn533: properly drop the usb interface reference on disconnect When the device is disconnected from the driver, there is a dangling reference count on the...

5.5CVSS4.3AI score0.00123EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/24 3:30 p.m.9 views

EUVD-2026-14823

Denial-of-service in the WebRTC: Signaling component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...

7.5CVSS5.8AI score0.00414EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/03/24 3:30 p.m.11 views

EUVD-2026-14825

Undefined behavior in the WebRTC: Signaling component. This vulnerability affects Firefox 149 and Firefox ESR 140.9...

9.8CVSS5.8AI score0.00418EPSS
SaveExploits0References4
NVD
NVD
added 2026/03/24 1:16 p.m.10 views

CVE-2026-4722

Privilege escalation in the IPC component. This vulnerability was fixed in Firefox 149 and Thunderbird 149...

8.8CVSS0.00313EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/03/24 1:16 p.m.13 views

CVE-2026-4704

Denial-of-service in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

7.5CVSS7.3AI score0.00414EPSS
SaveExploits0References9
OSV
OSV
added 2026/03/24 1:16 p.m.13 views

UBUNTU-CVE-2026-4722

Privilege escalation in the IPC component. This vulnerability was fixed in Firefox 149 and Thunderbird 149...

8.8CVSS7.2AI score0.00313EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2026/03/24 1:16 p.m.7 views

CVE-2026-4718

Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

8.1CVSS7.3AI score0.00299EPSS
SaveExploits0References9
ATTACKERKB
ATTACKERKB
added 2026/03/24 12:30 p.m.12 views

CVE-2026-4718

Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

8.1CVSS7.2AI score0.00299EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/03/24 12:30 p.m.44 views

CVE-2026-4718 Undefined behavior in the WebRTC: Signaling component

Undefined behavior in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

0.00299EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2026/03/24 12:30 p.m.8 views

CVE-2026-4704

Denial-of-service in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

7.5CVSS7.9AI score0.00414EPSS
SaveExploits0
CVE
CVE
added 2026/03/24 12:30 p.m.42 views

CVE-2026-4704

Denial-of-service in the WebRTC: Signaling component (CVE-2026-4704) affects Firefox/Firefox ESR and Thunderbird prior to fixed versions. Multiple documents confirm the issue and indicate fixes in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9. The vulnerability is associa...

7.5CVSS7.2AI score0.00414EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2026/03/24 12:30 p.m.41 views

CVE-2026-4704 Denial-of-service in the WebRTC: Signaling component

Denial-of-service in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

0.00414EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/03/24 12:30 p.m.7 views

CVE-2026-4704

Denial-of-service in the WebRTC: Signaling component. This vulnerability affects Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

7.5CVSS5.8AI score0.00414EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/03/24 12:30 p.m.8 views

CVE-2026-4722

Privilege escalation in the IPC component. This vulnerability was fixed in Firefox 149 and Thunderbird 149...

8.8CVSS7.2AI score0.00313EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
added 2026/03/24 12:30 p.m.22 views

CVE-2026-4722

Privilege escalation in the IPC component. This vulnerability was fixed in Firefox 149 and Thunderbird 149...

8.8CVSS7.2AI score0.00313EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/03/24 9:36 a.m.11 views

CVE-2026-29111

A flaw was found in systemd, a system and service manager. An unprivileged user can exploit this vulnerability by making an Inter-Process Communication IPC API call with spurious data. In older versions v249 and earlier, this can lead to stack overwriting with attacker-controlled content,...

7.8CVSS6.3AI score0.00121EPSS
SaveExploits0References14
CNNVD
CNNVD
added 2026/03/24 12:00 a.m.16 views

Mozilla Firefox和Mozilla Thunderbird 安全漏洞

Mozilla Firefox is an open source web browser.Mozilla Thunderbird is a set of e-mail client software separate from the Mozilla Application Suite. The software supports IMAP, POP mail protocols and HTML mail format. A code execution vulnerability exists in Mozilla Firefox and Mozilla Thunderbird d...

8.8CVSS7.9AI score0.00313EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/03/23 10:34 p.m.15 views

Improper Privilege Management

Overview Affected versions of this package are vulnerable to Improper Privilege Management in the IPC API process when spurious data is provided by an unprivileged local user. An attacker can cause the system to freeze or overwrite the stack by sending crafted IPC API calls. Remediation A fix was...

7.8CVSS5.9AI score0.00121EPSS
SaveExploits0References2
Rows per page
Query Builder