1629 matches found
Mozilla Thunderbird < 140.2
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 140.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-72 advisory. - Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ES...
Mozilla多款产品 安全漏洞
Mozilla Firefox and Mozilla Thunderbird are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open-source Web browser.Mozilla Thunderbird is a separate set of Mozilla Application Suite Email client software. The program supports IMAP, POP mail protocols, and HTML mail...
CVE-2025-55286
z2d is a pure Zig 2D graphics library. z2d v0.7.0 released with a new multi-sample anti-aliasing MSAA method, which uses a new buffering mechanism for storing coverage data. This differs from the standard alpha mask surface used for the previous super-sample anti-aliasing SSAA method. Under certa...
Linux Distros Unpatched Vulnerability : CVE-2023-25360
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free vulnerability in WebCore::RenderLayer::renderer in WebKitGTK before 2.36.8 allows attackers to execute code remotely. CVE-2023-25360 Note that...
Malicious code in webpack-sever-render-middleware (npm)
The package webpack-sever-render-middleware was found to contain malicious code...
Malicious code in render-loop (npm)
The package render-loop was found to contain malicious code...
Malicious code in com.unity.render-pipelines.core (npm)
The package com.unity.render-pipelines.core was found to contain malicious code...
Malicious code in cicada-render (npm)
The package cicada-render was found to contain malicious code...
MAL-2025-17016 Malicious code in cicada-render (npm)
The package cicada-render was found to contain malicious code...
MAL-2025-17362 Malicious code in com.unity.render-pipelines.universal (npm)
The package com.unity.render-pipelines.universal was found to contain malicious code...
MAL-2025-32073 Malicious code in render-loop (npm)
The package render-loop was found to contain malicious code...
MAL-2025-39034 Malicious code in webpack-sever-render-middleware (npm)
The package webpack-sever-render-middleware was found to contain malicious code...
MAL-2025-17361 Malicious code in com.unity.render-pipelines.core (npm)
The package com.unity.render-pipelines.core was found to contain malicious code...
Linux Distros Unpatched Vulnerability : CVE-2021-29952
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When Web Render components were destructed, a race condition could have caused undefined behavior, and we presume that with enough effort may have been...
Linux Distros Unpatched Vulnerability : CVE-2024-32875
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hugo is a static site generator. Starting in version 0.123.0 and prior to version 0.125.3, title arguments in Markdown for links and images not escaped in...
Linux Distros Unpatched Vulnerability : CVE-2015-3231
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Render cache system in Drupal 7.x before 7.38, when used to cache content by user role, allows remote authenticated users to obtain private content viewed b...
xorg-x11-server: Use-after-free in ProcRenderAddGlyphs
A use-after-free vulnerability was found in the ProcRenderAddGlyphs function of Xorg servers. This issue occurs when AllocateGlyph is called to store new glyphs sent by the client to the X server, potentially resulting in multiple entries pointing to the same non-refcounted glyphs. Consequently,...
CVE-2025-6382: Improper Neutralization of Input During Web Page Generation
The Taeggie Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's taeggie-feed shortcode in all versions up to, and including, 0.1.10. The plugin’s render method takes the user-supplied name attribute and injects it directly into a...
webkitgtk: heap-use-after-free in WebCore::RenderLayer::addChild()
A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute code remotely...
Progress多款产品 跨站脚本漏洞
Progress Telerik UI for ASP.NET Core and others are products of Progress, Inc.Progress Telerik UI for ASP.NET Core is a set of UI component libraries for building cross-platform responsive web applications.Progress Telerik UI for Progress Telerik UI for ASP.NET MVC is a library of UI components f...