73806 matches found
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101150)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101150 advisory. Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7. Tenable has...
PT-2026-73214
Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens...
PT-2026-76828
Name of the Vulnerable Software and Affected Versions Pandora affected versions not specified Description Stored cross-site scripting XSS occurs during the rendering of URL observables. A URL associated with an analyzed file is inserted directly into the inline JavaScript onclick handler of the...
CVE-2026-75531: Improper Neutralization of Input During Web Page Generation
Pandora contains a stored cross-site scripting XSS vulnerability in the rendering of URL observables. A URL extracted from or associated with an analyzed file was inserted directly into the inline JavaScript onclick handler used by the Submit to Lookyloo action. Although the value was subject to...
PT-2026-73299
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an attacker to execute arbitrary JavaScript in another user's browser via a crafted URL, due to improper...
CVE-2026-55674: Improper Neutralization of Input During Web Page Generation
Discourse is an open-source discussion platform. Prior to 2026.1.6, 2026.5.2, 2026.6.1, and 2026.7.0, an unauthenticated attacker could send a single request with a crafted colorschemeid or darkschemeid cookie to inject arbitrary HTML into a Discourse page. Because the cookie value was rendered...
PT-2026-76681
Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.1.6 Discourse versions prior to 2026.5.2 Discourse versions prior to 2026.6.1 Discourse versions prior to 2026.7.0 Description An unauthenticated attacker can inject arbitrary HTML into a page by sending a...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100922)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100922 advisory. Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbi...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100941)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100941 advisory. Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100901)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100901 advisory. JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101117)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101117 advisory. Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101127)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101127 advisory. Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. Tenable ha...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100976)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100976 advisory. Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7. Tenable has...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101365)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101365 advisory. Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. Tenable ha...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-100930)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100930 advisory. JIT miscompilation, use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8,...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101484)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101484 advisory. Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8. Tenable ha...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-100957)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100957 advisory. Integer overflow in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140....
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101088)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101088 advisory. Integer overflow in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...
