firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component...

Backstage 输入验证错误漏洞

Backstage is an open-source application developed by Backstage. It serves as an open platform for building developer portals. Versions of Backstage prior to 0.27.1 contained a vulnerability related to input validation errors. This vulnerability stemmed from an experimental OIDC provisioning...

The vulnerability of the drm_sched_entity_kill_jobs_cb() function in the drivers/gpu/drm/scheduler/sched_entity.c file of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drmschedentitykilljobscb function in the drivers/gpu/drm/scheduler/schedentity.c file of the Linux operating system is related to errors during thread blocking. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Bluetooth RFCOM Protocol Driver for Windows operating systems allows attackers to gain increased privileges.

The vulnerability of the Bluetooth RFCOM Protocol Driver for Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability in the implementation of the Kerberos protocol for Windows operating systems allows a perpetrator to circumvent security restrictions.

The vulnerability of the Kerberos protocol for Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

Shopware has user enumeration via distinct error codes on Store API login endpoint

Summary The Store API login endpoint POST /store-api/account/login returns different error codes depending on whether the submitted email address belongs to a registered customer CHECKOUTCUSTOMERAUTHBADCREDENTIALS or is unknown CHECKOUTCUSTOMERNOTFOUND. The "not found" response also echoes the...

SUSE CVE-2025-14435

Mattermost versions 10.11.x = 10.11.8, 11.1.x = 11.1.1, 11.0.x = 11.0.6 fail to prevent infinite re-renders on API errors which allows authenticated users to cause application-level DoS via triggering unbounded component re-render loops...

CVE-2026-30235

OpenProject is an open-source, web-based project management software. Prior to 17.2.0, this vulnerability occurs due to improper validation of OpenProject’s Markdown rendering, specifically in the hyperlink handling. This allows an attacker to inject malicious hyperlink payloads that perform DOM...

SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2026:0851-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0851-1 advisory. - CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression bsc1258743. - CVE-2026-24484:...

The vulnerability of the virtio-net component in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the virtio-net component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the kcm_release() function in the net/kcm/kcmsock.c module, which is part of the networking functions in the Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the kcmrelease function in the net/kcm/kcmsock.c module, which implements networking functions for the Linux operating system’s kernel, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service...

The vulnerability of the __do_sys_open_tree_attr() function in the fs/namespace.c file of the Linux kernel’s file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dosysopentreeattr function in the fs/namespace.c file of the Linux kernel file system is related to initialization errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the 3D model texturing program Adobe Substance 3D Painter, related to pointer assignment errors, allows a hacker to cause a service failure.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the cfg80211_check_and_end_cac() function in the net/wireless/reg.c module, which supports wireless communication in the Linux kernel, allows a hacker to trigger a service failure.

The vulnerability of the cfg80211checkandendcac function in the net/wireless/reg.c module, which supports wireless communication in Linux kernels, is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the 3D model texturing program Adobe Substance 3D Painter, related to pointer assignment errors, allows a hacker to cause a service failure.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260310-73-0022

Vulnerability in python-filelock related to synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

The vulnerability of the fs/btrfs component in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the fs/btrfs component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the shadow copying subsystem of the Secret Net Studio protection tool, which allows a perpetrator to modify the protected data.

The vulnerability of the shadow copying subsystem of the Secret Net Studio protection tool is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to modify the protected data...

The vulnerability of the shadow copying subsystem of the Secret Net Studio protection tool is related to resource management errors. Exploiting this vulnerability could allow an attacker to influence the accessibility and integrity of the protected information.

The vulnerability of the shadow copying subsystem of the Secret Net Studio protection tool is related to resource management errors. Exploiting this vulnerability could allow an attacker to influence the accessibility and integrity of the protected information...

The vulnerability of the drivers/net/ethernet/intel/ixgbevf component in Linux kernel allows a hacker to cause a service failure.

The vulnerability of the drivers/net/ethernet/intel/ixgbevf component in Linux operating systems is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...