391134 matches found
CVE-2026-84641
Mozilla Thunderbird is affected by an information disclosure vulnerability in its IMAP client. A malicious IMAP server can send a crafted ID response that triggers a use-after-free , leading to heap-memory disclosure . The disclosed heap contents can ultimately be persisted to the user's prefs.js...
CVE-2026-84639
CVE-2026-84639 affects Thunderbird , Mozilla's email client. The vulnerability exists in MIME parsing : triggering an error condition in certain MIME bodies causes uninitialized memory to be used. The specific impact (e.g., information disclosure or code execution) is not further detailed in the ...
CVE-2026-84640
CVE-2026-84640 is a one-byte out-of-bounds read in the mail parser of Mozilla Thunderbird . A maliciously constructed mail header can trigger a read past the end of a buffer. The vulnerability was fixed in Thunderbird 155 . No exploitation details are provided in the available documents, so the p...
CVE-2026-83549
An OS Command Injection vulnerability has been identified in the SonicWall SMA1000 Appliance Management Console (AMC) . Under specific conditions, a post-authentication attacker with administrator privileges can execute arbitrary OS commands, leading to remote code execution . The CVSS 3.1 score ...
CVE-2026-84374
Laravel Excel (Maatwebsite) versions 3.1.8 through 3.1.70 contain a path-traversal flaw in Maatwebsite\Excel\Files\Disk::copy() (src/Files/Disk.php). The method resolves a caller-controlled $destination passed via Excel::store(), $export->store(), or storeExcel() against the process working di...
CVE-2026-84373
CVE-2026-84373 affects Vitest (a Vite-powered testing framework) versions 2.1.0 through 4.1.10 and 5.0.0-rc.1 . The vulnerability exists in the mockerPlugin and interceptorPlugin exports within packages/mocker/src/node/interceptorPlugin.ts, which register a vitest:interceptor:register handler on ...
CVE-2026-83548
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized...
CVE-2026-84637
This vulnerability affects Mozilla Thunderbird on Windows , where malicious calendar invitations could use file URI attachments to launch local or network-hosted executables, bypassing Thunderbird's normal executable attachment protections. With the new invitation display enabled, the attachment ...
CVE-2026-75604
CVE-2026-75604 is a critical (CVSS 9.0) unauthenticated remote code execution vulnerability in Next.js versions 13.4.0 through 15.5.23 and 16.0 through 16.3.2, affecting applications that use Pages Router and App Router without Cache Components on Windows-hosted servers . The root cause is incons...
CVE-2026-84372
Predis , a PHP client for Redis and Valkey, is affected by a critical (CVSS 9.8) Redis command injection and denial of service vulnerability in versions 3.0.0-RC1 through 3.3.0 . The root cause lies in AbstractAggregateConnection::write(), which reparses an already serialized RESP buffer using ex...
CVE-2026-84288
NousResearch hermes-agent (up to version 0.18.2) contains a denial of service vulnerability in the HermesACPAgent.prompt function located in acp_adapter/session.py (ACP Prompt Workflow component). The attack can be performed remotely with low privileges and no user interaction required. A proof-o...
CVE-2026-84287
A denial-of-service vulnerability exists in NousResearch hermes-agent 0.18.0 , specifically within the Session Chat Interface component in the file gateway/platforms/api_server.py. The flaw allows a remote attacker with low privileges to cause a service disruption. The exploit is reported as publ...
CVE-2026-84470
A permission-check inconsistency in Ansible Automation Platform 's automation-controller (AWX) allows an execution-placement authorization bypass . The Bulk Job Launch API (POST /api/v2/bulk/job_launch/) validates requested instance_groups at only a read-level permission, whereas the standard sin...
CVE-2026-84371
ApostropheCMS (Node.js CMS) shipped a sanitize-html package vulnerable to stored XSS via SVG SMIL animation elements from version 1.9.0 through 2.17.7 . The root cause is in packages/sanitize-html/index.js, which validates the values attribute as a single flat URL, failing to account for SVG SMIL...
CVE-2026-84370
SVGO (SVG Optimizer), a popular Node.js library for optimizing SVG files, contains a flaw in its opt-in removeScripts plugin (named removeScriptElement in v2/v3) that allows executable links to bypass filtering. The root cause involves two bypass vectors: the plugin fails to recognize namespace-p...
CVE-2026-73524
CVE-2026-73524 is a cross-site scripting (XSS) vulnerability in Cypht (versions before 2.12.2 ), located in the contacts module . The root cause is a flawed sanitization routine that removes only the first occurrence of each angle bracket character, leaving additional angle brackets intact. An at...
CVE-2026-84369
SVGO (SVG Optimizer), a Node.js library and CLI for optimizing SVG files, contains a sanitization gap in its opt-in removeScripts plugin (v1.0.0 through 2.8.3 / 3.3.4 / 4.0.x). The plugin removes SVG and XHTML [removed] elements but does not inspect executable HTML content inside SVG foreignObjec...
CVE-2026-71981
Cypht versions before 2.12.2 contain a PHP object injection vulnerability in the logout handler. The back_query GET parameter accepts a base64-encoded serialized payload that is passed directly to unserialize() without an allow-list, signature check, or type restriction, enabling gadget-chain exp...
CVE-2026-84368
joi (and its predecessor @hapi/joi ), a JavaScript schema validator, is affected by a prototype pollution vulnerability in lib/messages.js. The functions exports.compile() and exports.merge() reuse inherited objects for attacker-controlled language keys (e.g., __proto__ or constructor), which can...