27307 matches found
Astra Linux – Vulnerability in jqueryui
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various Text options of the Datepicker widget from untrusted sources might execute untrusted code. This issue has been fixed in jQuery UI 1.13.0. The values passed to various Text options are...
Astra Linux – Vulnerability in node-moment
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Versions of moment that were affected use an inefficient parsing algorithm. Specifically, the string-to-date parsing method used by moment more precisely, the rfc2822 parsing method, which is used by...
Astra Linux – Vulnerability in Ruby 2.5
In the date gem for Ruby, from version 3.2.0 onwards, Date.parse can cause ReDoS Regular Expression Denial of Service attacks due to the use of a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1...
Astra Linux – Vulnerability in Thunderbird
An OpenPGP digital signature includes information about the date when the signature was created. When displaying an email that contains a digital signature, the email’s date will be displayed. If the dates are different, then Thunderbird does not report the email as having an invalid signature. I...
Astra Linux – Vulnerability in libusrsctp
The usrsctp before December 20, 2019, has out-of-bounds reads in sctploadaddressesfrominit...
Astra Linux – Vulnerability in Thunderbird
The signature of a digitally signed S/MIME email message may optionally specify the signature creation date and time. If this information is present, Thunderbird does not compare the signature creation date with the message date and time, and displays a valid signature even if there is a mismatch...
Astra Linux – Vulnerability in jqueryui
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the altField option from untrusted sources might execute untrusted code. This issue has been fixed in jQuery UI 1.13.0. Any string value passed to the altField option is now treated as a CSS...
Astra Linux – Vulnerability in FontForge
Splinefont in FontForge, with a version number of 20230101, allows for command injection via crafted filenames...
Astra Linux – Vulnerability in Firefox and Thunderbird
The date picker may partially obscure security prompts. A malicious site could use this feature to trick users into granting permissions. This vulnerability affects Firefox 129, Firefox ESR 115.14, Firefox ESR 128.1, Thunderbird 128.1, and Thunderbird 115.14...
CVE-2026-34754
creationtimestamp| type| source ---|---|--- 2026-05-20 02:45:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmav74vm632k...
CVE-2026-6095
creationtimestamp| type| source ---|---|--- 2026-05-20 02:43:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmav3bxamm2h...
CVE-2026-8491
creationtimestamp| type| source ---|---|--- 2026-05-20 02:34:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmaulcoeo72i...
CVE-2026-8495
creationtimestamp| type| source ---|---|--- 2026-05-20 02:32:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmauimk56x2v 2026-06-03 11:01:11+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mnexgahs4r2j...
ANT-2026-6615Y595 · wolfSSL · Heap Buffer Overflow
heap-buffer-overflow medium CVE-2026-5448 Severity Claude medium · Security research firm medium · Maintainer - REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-6615Y595: Final Assessment: 2-Byte Heap Overflow in wolfSSLX509notAfter /...
CVE-2026-4883
creationtimestamp| type| source ---|---|--- 2026-05-20 00:32:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mmanqicipo2u 2026-06-01 11:02:59+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mn7wllwb4z2b 2026-06-22 01:31:58+00:00| seen|...
EUVD-2026-30992
Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing. This issue affects Date iCal: from 0.0.0 before 4.0.15...
CVE-2024-36343
creationtimestamp| type| source ---|---|--- 2026-05-19 23:17:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmajkrhlru2q...
CVE-2026-8495
Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing. This issue affects Date iCal: from 0.0.0 before 4.0.15...