7487 matches found
EUVD-2026-64270
SiYuan versions before v3.7.4 fail to validate that packageName matches the downloaded package content in bazaar install endpoints. Attackers with same-origin access can overwrite existing trusted plugins by supplying mismatched packageName and repoURL parameters, achieving persistence across...
CVE-2026-62204
SiYuan versions before v3.7.4 contain a plugin overwrite vulnerability in the bazaar install endpoints . The root cause is a failure to validate that the packageName parameter matches the actual downloaded package content. An attacker with same-origin access can supply mismatched packageName and ...
[SECURITY] [DLA 4750-1] firefox-esr security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4750-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 21, 2026 https://wiki.debian.org/LTS -...
EUVD-2026-63261
n8n before 1.123.69, 2.33.4, and 2.34.1 contains a stored cross-site scripting vulnerability in the Form node's completion page. The completion page applied its sandboxing Content-Security-Policy only when respondWith was not set to 'redirect', but responseText was always rendered as raw HTML. An...
CVE-2026-77072 n8n before 1.123.69 Stored XSS via Form Completion Page
n8n before 1.123.69, 2.33.4, and 2.34.1 contains a stored cross-site scripting vulnerability in the Form node's completion page. The completion page applied its sandboxing Content-Security-Policy only when respondWith was not set to 'redirect', but responseText was always rendered as raw HTML. An...
CVE-2026-77072 n8n before 1.123.69 Stored XSS via Form Completion Page
n8n before 1.123.69, 2.33.4, and 2.34.1 contains a stored cross-site scripting vulnerability in the Form node's completion page. The completion page applied its sandboxing Content-Security-Policy only when respondWith was not set to 'redirect', but responseText was always rendered as raw HTML. An...
[SECURITY] [DSA 6451-1] firefox-esr security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6451-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 19, 2026 https://www.debian.org/security/faq -...
UBUNTU-CVE-2026-74967
Same-origin policy bypass in the Audio/Video: Playback component. This...
CVE-2026-74974
Same-origin policy bypass in the Graphics: ImageLib component. This vu...
UBUNTU-CVE-2026-74963
Same-origin policy bypass in the Networking: Cookies component. This v...
UBUNTU-CVE-2026-74956
Same-origin policy bypass in the DOM: Service Workers component. This...
UBUNTU-CVE-2026-74974
Same-origin policy bypass in the Graphics: ImageLib component. This vu...
Linux Distros Unpatched Vulnerability : CVE-2026-74963
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird...
CVE-2026-74963
Same-origin policy bypass in the Networking: Cookies component. This v...
Linux Distros Unpatched Vulnerability : CVE-2026-74974
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Same-origin policy bypass in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR...
Linux Distros Unpatched Vulnerability : CVE-2026-74967
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Same-origin policy bypass in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbir...
Debian dsa-6451 : firefox-esr - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6451 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6451-1 [email protected] https://www.debian.org/securit...
CVE-2026-74974
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Graphics: ImageLib component...