37871 matches found
CVE-2026-0889
Denial-of-service in the DOM: Service Workers component. This vulnerability was fixed in Firefox 147 and Thunderbird 147...
EUVD-2026-2357
Zohocorp ManageEngine PAM360 versions before 8202; Password Manager Pro versions before 13221; Access Manager Plus versions prior to 4401 are vulnerable to an authorization issue in the initiate remote session functionality...
Astra Linux – Vulnerability in mupdf
A issue in Artifex mupdf 1.25.6 and 1.25.5 allows a remote attacker to cause a denial of service due to infinite recursion in the mutool clean utility. When processing a crafted PDF file containing cyclic /Next references in the outline structure, the stripoutline function enters infinite recursi...
Astra Linux – Vulnerability in Poppler
Versions of Poppler from 24.06.1 through 25.x, prior to 25.04.0, allowed stack consumption and a SIGSEGV due to deeply nested structures within the metadata of a PDF document such as GTSPDFEVersion. This issue occurred in functions like Dict::lookup, Catalog::getMetadata, and related functions in...
EUVD-2026-2351
The EventPrime - Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.7.0 via the REST API. This makes it possible for unauthenticated attackers to extract sensitive booking data including user names,...
EUVD-2026-2352
The CP Image Store with Slideshow plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.9 due to a logic error in the 'cpisadmininit' function's permission check. This makes it possible for authenticated attackers, with Contributor-level access and...
EUVD-2026-2354
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Lemonsoft WordPress add on allows Cross-Site Scripting XSS.This issue affects WordPress add on: 2025.7.1...
EUVD-2026-2353
Zohocorp ManageEngine ADSelfService Plus versions before 6519 are vulnerable to Authentication Bypass due to improper filter configurations...
EUVD-2026-2082
Spoofing issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability affects Firefox 147 and Firefox ESR 140.7...
CVE-2026-0890 Spoofing issue in the DOM: Copy & Paste and Drag & Drop component
Spoofing issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7...
EUVD-2026-2358
Memory safety bugs present in Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 147...
EUVD-2026-2344
Memory safety bugs present in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox...
EUVD-2026-2079
Information disclosure in the XML component. This vulnerability affects Firefox 147...
CVE-2026-0889
Denial-of-service in the DOM: Service Workers component. This vulnerability affects Firefox 147 and Thunderbird 147...
CVE-2026-0889
Denial-of-service in the DOM: Service Workers component. This vulnerability was fixed in Firefox 147 and Thunderbird 147...
EUVD-2026-2080
Incorrect boundary conditions in the Graphics component. This vulnerability affects Firefox 147, Firefox ESR 115.32, and Firefox ESR 140.7...
EUVD-2026-2078
Clickjacking issue, information disclosure in the PDF Viewer component. This vulnerability affects Firefox 147 and Firefox ESR 140.7...
EUVD-2026-2342
Information disclosure in the Networking component. This vulnerability affects Firefox 147 and Firefox ESR 140.7...