9661 matches found
CVE-2026-74971 Information disclosure in the DOM: UI Events & Focus Handling component
Information disclosure in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...
CVE-2026-74971
Mozilla Firefox and Thunderbird are vulnerable to information disclosure via the DOM UI Events & Focus Handling component. CVSS 3.1 scores this MEDIUM (4.3) with network attack vector, low complexity, and no privileges required. Exploitation details are not provided in the documents. Affected ver...
PT-2026-77085
Unauthenticated SQL Injection in Modern Events Calendar 7.35.0 versions...
PT-2026-77004
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 154 Firefox ESR versions prior to 140.14 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird versions prior to 140.14 Thunderbird versions prior to 153.1 Description An information...
PT-2026-77174
MyBB is free and open source forum software. Prior to 1.8.40, the calendar module does not verify private event status consistently, allowing users with viewing and moderation permissions to access and moderate private events. The private-event check used by get events in inc/functions calendar.p...
CVE-2026-74426 afs: fix NULL pointer dereference in afs_get_tree()
In the Linux kernel, the following vulnerability has been resolved: afs: fix NULL pointer dereference in afsgettree afsallocsbi uses kzalloc for memory allocation. And, if ctx-dynroot is not null, as-cell and as-volume are null. In traceafsgettree they are dereferenced. KASAN error message: KASAN...
PT-2026-72862
In the Linux kernel, the following vulnerability has been resolved: afs: fix NULL pointer dereference in afs get tree afs alloc sbi uses kzalloc for memory allocation. And, if ctx-dyn root is not null, as-cell and as-volume are null. In trace afs get tree they are dereferenced. KASAN error messag...
PT-2026-72260
In the Linux kernel, the following vulnerability has been resolved: tracing/user events: Fix use-after-free in user event mm dup user event mm dup walks the parent mm's enabler list locklessly under rcu read lock during fork from copy process; it does not take event mutex: rcu read lock; list for...
GO-2023-1930 vulnerabilities
Vulnerabilities for packages: argo-events-fips, argo-events...
GO-2025-3608 vulnerabilities
Vulnerabilities for packages: argo-events-fips...
GO-2025-3368 vulnerabilities
Vulnerabilities for packages: kaniko, flux-fips, kaniko-fips, gitea-fips, amazon-ssm-agent, snyk-cli, wolfictl, apko, tfsec, argocd-image-updater, syft, gitea, grafana-alloy, nemo, timoni, argo-events, pulumi, argo-events-fips, goreleaser, trivy, argocd-image-updater-fips, bom, kargo,...
GO-2025-4123 vulnerabilities
Vulnerabilities for packages: bento, dapr-fips, grafana-alloy, argo-events, argo-events-fips, jitsucom-bulker, amazon-cloudwatch-agent-fips, sqlexporter, splunk-otel-collector, sqlexporter-fips, opentelemetry-collector-contrib, amazon-cloudwatch-agent, vault-fips, cluster-api-aws-controller,...
GO-2026-5026 vulnerabilities
Vulnerabilities for packages: drone-fips, timestamp-authority-fips, consul-k8s, gostatsd, metacontroller-fips, crossplane-provider-aws-xray-fips, crossplane-provider-aws-grafana-fips, crossplane-provider-aws-ssoadmin-fips, go-fips, kyverno-policy-reporter-plugins-trivy-fips, steampipe,...
GO-2025-3367 vulnerabilities
Vulnerabilities for packages: grafana-alloy, zarf, timoni, pulumi-language-yaml, src-fingerprint, gitsign, trivy, wolfictl, tfsec, kots, flux, flux-kustomize-controller, bom, pulumi-language-dotnet, pulumi-kubernetes-operator, snyk-cli, grype, flux-image-automation-controller, skaffold, gitea, k9...
GO-2025-3368 vulnerabilities
Vulnerabilities for packages: grafana-alloy, zarf, timoni, pulumi-language-yaml, src-fingerprint, gitsign, trivy, wolfictl, tfsec, kots, flux, flux-kustomize-controller, bom, pulumi-language-dotnet, pulumi-kubernetes-operator, snyk-cli, grype, flux-image-automation-controller, skaffold, gitea, k9...
GO-2026-5410 vulnerabilities
Vulnerabilities for packages: bento, argo-rollouts, atlantis, kyverno-policy-reporter, argo-cd, argo-events, goreleaser, kubernetes-event-exporter, kubewatch...
GO-2026-4910 vulnerabilities
Vulnerabilities for packages: grafana-alloy, rancher-fleet, teleport, zarf, pulumi-language-yaml, src-fingerprint, gitsign, trivy, wolfictl, tfsec, kots, flux, bom, steampipe, pulumi-language-dotnet, argo-cd, pulumi-kubernetes-operator, snyk-cli, grype, flux-image-automation-controller, skaffold,...
GO-2026-5021 vulnerabilities
Vulnerabilities for packages: prometheus, telegraf, argo-events, containerd, mattermost, gitsign, terragrunt, external-secrets-operator, guac, istio, argocd-image-updater, k3s...