CGA-MVCJ-PC68-76CM

Bulletin has no description...

firefox: thunderbird: Spoofing issue in the DOM: Copy & Paste and Drag & Drop component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Spoofing issue in the DOM: Copy & Paste and Drag & Drop component...

EUVD-2026-2830

Not used...

EUVD-2026-2837

Not used...

EUVD-2026-2828

Not used...

EUVD-2026-2834

Not used...

EUVD-2026-2833

Not used...

EUVD-2026-2836

Not used...

EUVD-2026-2835

Not used...

EUVD-2026-2832

Not used...

EUVD-2026-2831

Not used...

EUVD-2026-2839

EUVD-2026-2839...

EUVD-2026-2840

EUVD-2026-2840...

PT-2026-2987

Name of the Vulnerable Software and Affected Versions Grafana XY Chart Plugin affected versions not specified Description The XY Chart plugin has a DOM XSS issue. A user with Editor permissions can modify a panel to execute arbitrary JavaScript. Recommendations At the moment, there is no...

EUVD-2026-2759

File upload vulnerability in Omnispace Agora Project before 25.10 allowing attackers to execute code through the MSL engine of the Imagick library via crafted PDF file to the file upload and thumbnail functions...

Omnispace Agora Project security vulnerabilities

Omnispace Agora Project is a satellite IoT verification project developed by the American company Omnispace. Versions of Omnispace Agora Project prior to version 25.10 contained security vulnerabilities. These vulnerabilities stemmed from defects in the file upload function, which could allow...

CVE-2025-67079

File upload vulnerability in Omnispace Agora Project before 25.10 allowing attackers to execute code through the MSL engine of the Imagick library via crafted PDF file to the file upload and thumbnail functions...

PT-2026-3024

Name of the Vulnerable Software and Affected Versions Omnispace Agora Project versions prior to 25.10 Description A file upload issue exists in Omnispace Agora Project. Attackers can potentially execute code by uploading a specially crafted PDF file. This is possible through the MSL engine of the...

EUVD-2026-2426

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to execute stored cross-site scripting through improper input validation in the Kubernetes proxy functionality...

EUVD-2026-2429

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Drupal Facebook Pixel facebookpixel allows Stored XSS.This issue affects Facebook Pixel: from 7.X-1.0 through 7.X-1.1...