CVE-2026-16374

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Framework component in DevTools...

CVE-2026-16354

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Graphics: ImageLib component...

[SECURITY] [DLA 4697-1] squid security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-4697-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta July 24, 2026 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...

CVE-2026-28698 Exposure of Sensitive System Information to an Unauthorized Control Sphere in Panduit IntraVUE by Pronetiqs

Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could expose the underlying host/share filesystem...

CVE-2026-28698

CVE-2026-28698 affects Pronetiqs IntraVUE prior to or equal to version 3.2.1a14. The vulnerability exposes sensitive system information to an unauthorized control sphere, potentially exposing the underlying host/share filesystem. The CVSS data indicates high to critical impact (CVSS 3.1: HIGH, CV...

CVE-2026-44955

CVE-2026-44955 affects Pronetiqs IntraVUE, version 3.2.1a14 and earlier. The issue is an exposure of sensitive system information to an unauthorized control sphere, enabling asset discovery by unauthenticated users. Documented impact is limited to information disclosure with no indicated changes ...

kernel: netfilter: xt_tcpmss: check remaining length before reading optlen

A flaw was found in the Linux kernel, specifically within the netfilter: xttcpmss module. A remote attacker could exploit this vulnerability by sending a specially crafted TCP packet. The TCP option parser does not properly validate the remaining option length, which results in an out-of-bounds...

CVE-2026-63359

The Appriss Insights Equifax Victim Information Notification Exchange VINE applications allow an unauthenticated attacker to send a specially-crafted request to bypass the login page, access other users' credentials, take over other user accounts, access sensitive PII, and dump other information...

ImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchanged

In the MNG decoder there is a possible heap information disclosure because part of the pixels are left unchanged...

GHSA-8G53-9M3C-69XG ImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchanged

In the MNG decoder there is a possible heap information disclosure because part of the pixels are left unchanged...

MINI-GCF7-GG34-256G

Bulletin has no description...

CVE-2026-47254

A flaw was found in libheif, a library for decoding and encoding HEIF and AVIF image files. A local attacker could exploit an out-of-bounds write vulnerability during the initialization of the sample timing table. This occurs when the number of chunks defined in the stco box is less than the numb...

CVE-2026-48029

A flaw was found in libheif, a library used for decoding and encoding HEIF and AVIF image files. A remote attacker could exploit a heap out-of-bounds read vulnerability by tricking a user into processing a specially crafted image file. This flaw can lead to information disclosure and potentially ...

EUVD-2026-48368

The Appriss Insights Equifax Victim Information Notification Exchange VINE applications allow an unauthenticated attacker to send a specially-crafted request to bypass the login page, access other users' credentials, take over other user accounts, access sensitive PII, and dump other information...

CVE-2026-63359

The Appriss Insights Equifax Victim Information Notification Exchange VINE applications allow an unauthenticated attacker to send a specially-crafted request to bypass the login page, access other users' credentials, take over other user accounts, access sensitive PII, and dump other information...

SUSE-SU-2026:3221-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issue: - Firefox Extended Support Release 140.13.0 ESR MFSA 2026-70, bsc1271649: - CVE-2026-15718: Invalid pointer in the JavaScript: WebAssembly component. - CVE-2026-15719: Site isolation issue in the DOM: Navigation component. - CVE-2026-16349...

CVE-2026-65696

Overseerr through 1.35.0 contains an authorization bypass through user-controlled key vulnerability in the push subscription API that allows authenticated users to list, read, and delete any other user's push subscriptions by supplying an arbitrary userId in the path parameters. Attackers can...

Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize

A flaw was found in Little CMS. An integer overflow in the CubeSize function within cmslut.c occurs because the overflow check is performed after the multiplication. An attacker could exploit this vulnerability by providing a specially crafted input, potentially leading to information disclosure ...

CVE-2026-60169

creationtimestamp| type| source ---|---|--- 2026-07-23 16:47:14+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-65760 Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1

Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1 - Improper access checks allow logged in users to retreive order and customer information of any order in the system...