37522 matches found
firefox: thunderbird: Sandbox escape in the DOM: Navigation component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the DOM: Navigation component...
MINI-797H-MW63-7P4V
Bulletin has no description...
firefox: thunderbird: Sandbox escape in the DOM: Navigation component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the DOM: Navigation component...
MINI-J94F-RM4Q-6F3X
Bulletin has no description...
MINI-RJ7V-GJ3W-F372
Bulletin has no description...
MINI-97CG-4Q29-F4Q8
Bulletin has no description...
PT-2026-59511
Impact An attacker can supply a malicious PDF that causes the process to hang indefinitely, consuming 100% CPU and making the application unresponsive. Patches Patched version: 12.2.0. PdfParser introduced in Pillow 4.2.0 follows Prev pointers in PDF trailers to read cross-reference sections. If ...
PT-2026-57763
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows DOM-Based XSS.This issue affects tagDiv Opt-In Builder: from n/a through = 1.7.4...
PT-2026-59628
Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the XMP metadata. Patches This has been fixed in pypdf==6.10.0. Workarounds If you cannot upgrade yet, consider applying the changes from PR 3724...
PT-2026-59634
Impact An attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires reading a file in non-strict mode. Patches This has been fixed in pypdf==6.9.2. Workarounds If users cannot upgrade yet, consider applying the changes from PR 3693...
MINI-5XV6-5229-PVVC
Bulletin has no description...
MINI-9MR8-QCGH-9GV5
Bulletin has no description...
MINI-4RVM-WRW2-CQHV
Bulletin has no description...
MINI-89H8-6RF5-G54R
Bulletin has no description...
MINI-82PC-9376-MQ44
Bulletin has no description...
MINI-9GC4-V3P4-88GG
Bulletin has no description...
MINI-8HF9-FCW4-FXHG
Bulletin has no description...
EUVD-2026-43227
Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Docker API server's /screenshot and /pdf endpoints. The outputpath parameter accepts arbitrary filesystem paths without validation, allowing an attacker to supply absolute or path-traversal values to write to any location...