EUVD-2026-2079

Information disclosure in the XML component. This vulnerability affects Firefox 147...

CVE-2026-0889

Denial-of-service in the DOM: Service Workers component. This vulnerability was fixed in Firefox 147 and Thunderbird 147...

EUVD-2026-2080

Incorrect boundary conditions in the Graphics component. This vulnerability affects Firefox 147, Firefox ESR 115.32, and Firefox ESR 140.7...

EUVD-2026-2078

Clickjacking issue, information disclosure in the PDF Viewer component. This vulnerability affects Firefox 147 and Firefox ESR 140.7...

EUVD-2026-2077

Use-after-free in the JavaScript: GC component. This vulnerability affects Firefox 147 and Firefox ESR 140.7...

EUVD-2026-2342

Information disclosure in the Networking component. This vulnerability affects Firefox 147 and Firefox ESR 140.7...

EUVD-2026-2341

Use-after-free in the JavaScript Engine component. This vulnerability affects Firefox 147 and Firefox ESR 140.7...

EUVD-2026-2087

Sandbox escape in the Messaging System component. This vulnerability affects Firefox 147...

EUVD-2026-2084

Use-after-free in the IPC component. This vulnerability affects Firefox 147, Firefox ESR 115.32, and Firefox ESR 140.7...

EUVD-2026-2085

Sandbox escape due to incorrect boundary conditions in the Graphics component. This vulnerability affects Firefox 147, Firefox ESR 115.32, and Firefox ESR 140.7...

EUVD-2026-2086

Sandbox escape due to integer overflow in the Graphics component. This vulnerability affects Firefox 147, Firefox ESR 115.32, and Firefox ESR 140.7...

EUVD-2026-2340

Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability affects Firefox 147 and Firefox ESR 140.7...

EUVD-2026-2339

Mitigation bypass in the DOM: Security component. This vulnerability affects Firefox 147, Firefox ESR 115.32, and Firefox ESR 140.7...

CVE-2026-0877

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7...

EUVD-2026-2355

Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the defVals parameter in the Edit Document Controller. An attacker can insert unauthorized data into restricted database fields by bypassing field-level access checks during record creation, provided the user...

Incorrect Authorization

Overview typo3/cms-core is a free open source enterprise content management system. Affected versions of this package are vulnerable to Incorrect Authorization via the defVals parameter in the Edit Document Controller. An attacker can insert unauthorized data into restricted database fields by...

EUVD-2026-2350

A vulnerability exists in Progress Flowmon ADS versions prior to 12.5.4 and 13.0.1 where an SQL injection vulnerability allows authenticated users to execute unintended SQL queries and commands...

EUVD-2026-2090

By exploiting the defVals parameter, attackers could bypass field‑level access checks during record creation in the TYPO3 backend. This gave them the ability to insert arbitrary data into prohibited exclude fields of a database table for which the user already has write permission for a reduced s...

CVE-2025-59020

The CVE-2025-59020 issue in TYPO3 CMS arises from abusing the defVals parameter to bypass field-level access checks during backend record creation. This allows insertion of data into restricted exclude fields for tables where the user has write access to a limited set of fields. Affected TYPO3 ve...