41346 matches found
Astra Linux – Vulnerability in mupdf
A issue in Artifex mupdf 1.25.6 and 1.25.5 allows a remote attacker to cause a denial of service due to infinite recursion in the mutool clean utility. When processing a crafted PDF file containing cyclic /Next references in the outline structure, the stripoutline function enters infinite recursi...
Astra Linux – Vulnerability in libxslt
A flaw was discovered in the exsltFuncResultComp function of libxslt, which handles EXSLT elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, leading to a type confusion. This can result in unexpected memory...
EUVD-2026-2351
The EventPrime - Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.7.0 via the REST API. This makes it possible for unauthenticated attackers to extract sensitive booking data including user names,...
EUVD-2026-2352
The CP Image Store with Slideshow plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.9 due to a logic error in the 'cpisadmininit' function's permission check. This makes it possible for authenticated attackers, with Contributor-level access and...
EUVD-2026-2354
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Lemonsoft WordPress add on allows Cross-Site Scripting XSS.This issue affects WordPress add on: 2025.7.1...
EUVD-2026-2353
Zohocorp ManageEngine ADSelfService Plus versions before 6519 are vulnerable to Authentication Bypass due to improper filter configurations...
EUVD-2026-2358
Memory safety bugs present in Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 147...
CVE-2026-0890 Spoofing issue in the DOM: Copy & Paste and Drag & Drop component
Spoofing issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7...
EUVD-2026-2082
Spoofing issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability affects Firefox 147 and Firefox ESR 140.7...
EUVD-2026-2344
Memory safety bugs present in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox...
CVE-2026-0889
Denial-of-service in the DOM: Service Workers component. This vulnerability was fixed in Firefox 147 and Thunderbird 147...
EUVD-2026-2079
Information disclosure in the XML component. This vulnerability affects Firefox 147...
CVE-2026-0889
Denial-of-service in the DOM: Service Workers component. This vulnerability affects Firefox 147 and Thunderbird 147...
EUVD-2026-2078
Clickjacking issue, information disclosure in the PDF Viewer component. This vulnerability affects Firefox 147 and Firefox ESR 140.7...
EUVD-2026-2080
Incorrect boundary conditions in the Graphics component. This vulnerability affects Firefox 147, Firefox ESR 115.32, and Firefox ESR 140.7...
EUVD-2026-2341
Use-after-free in the JavaScript Engine component. This vulnerability affects Firefox 147 and Firefox ESR 140.7...
EUVD-2026-2077
Use-after-free in the JavaScript: GC component. This vulnerability affects Firefox 147 and Firefox ESR 140.7...
EUVD-2026-2342
Information disclosure in the Networking component. This vulnerability affects Firefox 147 and Firefox ESR 140.7...