EUVD-2026-2818

An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages, leading to the extraction of sensitive data...

CGA-MVCJ-PC68-76CM

Bulletin has no description...

firefox: thunderbird: Spoofing issue in the DOM: Copy & Paste and Drag & Drop component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Spoofing issue in the DOM: Copy & Paste and Drag & Drop component...

EUVD-2026-2830

Not used...

EUVD-2026-2828

Not used...

EUVD-2026-2837

Not used...

EUVD-2026-2836

Not used...

EUVD-2026-2835

Not used...

EUVD-2026-2834

Not used...

EUVD-2026-2833

Not used...

EUVD-2026-2831

Not used...

EUVD-2026-2832

Not used...

EUVD-2026-2840

EUVD-2026-2840...

EUVD-2026-2839

EUVD-2026-2839...

CVE-2025-67079

File upload vulnerability in Omnispace Agora Project before 25.10 allowing attackers to execute code through the MSL engine of the Imagick library via crafted PDF file to the file upload and thumbnail functions...

PT-2026-3024

Name of the Vulnerable Software and Affected Versions Omnispace Agora Project versions prior to 25.10 Description A file upload issue exists in Omnispace Agora Project. Attackers can potentially execute code by uploading a specially crafted PDF file. This is possible through the MSL engine of the...

PT-2026-2987

Name of the Vulnerable Software and Affected Versions Grafana XY Chart Plugin affected versions not specified Description The XY Chart plugin has a DOM XSS issue. A user with Editor permissions can modify a panel to execute arbitrary JavaScript. Recommendations At the moment, there is no...

EUVD-2026-2759

File upload vulnerability in Omnispace Agora Project before 25.10 allowing attackers to execute code through the MSL engine of the Imagick library via crafted PDF file to the file upload and thumbnail functions...

Omnispace Agora Project security vulnerabilities

Omnispace Agora Project is a satellite IoT verification project developed by the American company Omnispace. Versions of Omnispace Agora Project prior to version 25.10 contained security vulnerabilities. These vulnerabilities stemmed from defects in the file upload function, which could allow...

EUVD-2026-2426

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated user to execute stored cross-site scripting through improper input validation in the Kubernetes proxy functionality...