37313 matches found
firefox: thunderbird: Sandbox escape in the DOM: Navigation component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the DOM: Navigation component...
MINI-797H-MW63-7P4V
Bulletin has no description...
firefox: thunderbird: Sandbox escape in the DOM: Navigation component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the DOM: Navigation component...
MINI-J94F-RM4Q-6F3X
Bulletin has no description...
MINI-RJ7V-GJ3W-F372
Bulletin has no description...
MINI-97CG-4Q29-F4Q8
Bulletin has no description...
PT-2026-59511
Impact An attacker can supply a malicious PDF that causes the process to hang indefinitely, consuming 100% CPU and making the application unresponsive. Patches Patched version: 12.2.0. PdfParser introduced in Pillow 4.2.0 follows Prev pointers in PDF trailers to read cross-reference sections. If ...
PT-2026-57763
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows DOM-Based XSS.This issue affects tagDiv Opt-In Builder: from n/a through = 1.7.4...
MINI-5XV6-5229-PVVC
Bulletin has no description...
MINI-9MR8-QCGH-9GV5
Bulletin has no description...
MINI-4RVM-WRW2-CQHV
Bulletin has no description...
MINI-89H8-6RF5-G54R
Bulletin has no description...
MINI-82PC-9376-MQ44
Bulletin has no description...
MINI-9GC4-V3P4-88GG
Bulletin has no description...
MINI-8HF9-FCW4-FXHG
Bulletin has no description...
EUVD-2026-43227
Crawl4AI before 0.8.7 contains an arbitrary file write vulnerability in the Docker API server's /screenshot and /pdf endpoints. The outputpath parameter accepts arbitrary filesystem paths without validation, allowing an attacker to supply absolute or path-traversal values to write to any location...
MINI-WQ22-R4RG-4978
Bulletin has no description...
MINI-XMR3-8P36-66JV
Bulletin has no description...
CVE-2026-13116
The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.14.0 via the generatedocumentshortcode due to missing validation on a user controlled key. This makes it possible for authenticated...