1059 matches found
MINI-4PHM-RW55-PVJX
Bulletin has no description...
MINI-RV7F-52HP-67MM
Bulletin has no description...
MINI-2P8C-V54C-JGC5
Bulletin has no description...
MINI-7C55-RFQ8-C3G3
Bulletin has no description...
symfony/ux-live-component: Denial of service via unbounded batch action requests
Description Symfony\UX\LiveComponent\Controller\BatchActionController::invoke iterates over the client-supplied actions array and issues a full HttpKernel sub-request for each entry event subscribers, validators, Doctrine, rendering. The array size is never bounded, so an authenticated client can...
MINI-2XCP-54RW-HM93
Bulletin has no description...
[SECURITY] Fedora 44 Update: firefox-152.0-1.fc44
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
MINI-52XR-MHPW-8855
Bulletin has no description...
EUVD-2026-37098
Memory safety bug fixed in Thunderbird 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12...
CVE-2026-12295
A sandbox escape vulnerability exists in the DOM: Navigation component of the Mozilla Firefox and Thunderbird applications. This flaw allows an attacker to bypass sandbox restrictions, potentially leading to significant impact on the host system. The vulnerability has been addressed in Firefox 15...
CVE-2026-12289
The Graphics: WebRender component in Mozilla Firefox and Mozilla Thunderbird is susceptible to a privilege escalation vulnerability. This flaw allows attackers to gain elevated privileges on a system. The issue has been addressed in several releases, including Firefox 152 , Firefox ESR 140.12 , F...
PT-2026-49682
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 152 Firefox ESR versions prior to 140.12 Thunderbird versions prior to 152 Thunderbird versions prior to 140.12 Description An information disclosure and sandbox escape issue exists within the Security: Process...
MINI-5V9M-RF59-CMC4
Bulletin has no description...
CVE-2026-11651 vulnerabilities
Vulnerabilities for packages: chromium...
VulnCheck KEV: CVE-2020-6286
The insufficient input path validation of certain parameter in the web service of SAP NetWeaver AS JAVA LM Configuration Wizard, versions - 7.30, 7.31, 7.40, 7.50, allows an unauthenticated attacker to exploit a method to download zip files to a specific directory, leading to Path Traversal...
CVE-2026-53463 ImageMagick: Null Pointer Dereference in distort operation when passing incorrect arguments
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, when passing incorrect arguments in the distort operation a null pointer deference will occur. This issue has been patched in versions 6.9.13-50 and 7.1.2-25...
CVE-2026-53460 ImageMagick: Policy Bypass can trigger out-of-Memory condition
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, a missing check for maximum memory request in AcquireAlignedMemory could trigger an out-of-Memory condition. This issue has been patched in versions 6.9.13-50 a...
MINI-QCVP-XX92-5W55
Bulletin has no description...
MINI-Q874-55MG-PQXW
Bulletin has no description...
CVE-2026-33449
CVE-2026-33449 is a buffer overflow in a message handling function of the Secure Access client prior to 14.50. Attackers with control of a modified server can send a cryptographically valid message to the client, overwriting a small portion of memory conceivably leading to a denial of service...