OESA-2026-4651 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fixes: Cryptographic issue in the Security Block-lists, Allow-lists, and other State component. This vulnerability was fixed in Firefox 158.0.1, Firefox ESR 153.5.1, Firefox ESR...

openSUSE 16: MozillaFirefox / MozillaFirefox-branding-upstream / etc (openSUSE-SU-2026:22159-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22159-1 advisory. Update to Firefox Extended Support Release 153.5.1 ESR MFSA 2026-112, bsc1286385: - CVE-2026-113470: Cryptographic issue in the Security Block-lists,...

Security update for mozilla-nss, MozillaFirefox (important)

openSUSE security update: security update for mozilla-nss, mozillafirefox ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22159-1 Rating: important References: bsc1286261 bsc1286385 Cross-References: CVE-2026-113470 CVSS scores: CVE-2026-113470 SUSE...

OPENSUSE-SU-2026:22159-1 Security update for mozilla-nss, MozillaFirefox

This update for mozilla-nss, MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.5.1 ESR MFSA 2026-112, bsc1286385: - CVE-2026-113470: Cryptographic issue in the Security Block-lists, Allow-lists, and other State component bsc1286261...

Oracle Linux: CVE-2026-113470: ELSA-2026-500449: ca-certificates security update (IMPORTANT) (Multiple Advisories)

Cryptographic issue in the Security Block-lists, Allow-lists, and other State component. This vulnerability was fixed in Firefox 158.0.1, Firefox ESR 153.5.1, Firefox ESR 115.43.1, Thunderbird 158.0.1, Thunderbird 153.5.1, and Firefox 158.0.2...

CVE-2023-7065: Cross-Site Request Forgery (CSRF)

The Stop Spammers Security | Block Spam Users, Comments, Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2024.4. This is due to missing or incorrect nonce validation on the sfsprocess AJAX action. This makes it possible for...

CVE-2023-2488: Undefined Security Weakness

The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2023 does not sanitise and escape various parameters before outputting them back in admin dashboard pages, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as ad...

CVE-2022-4120: Undefined Security Weakness

The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2022.6 passes base64 encoded user input to the unserialize PHP function when CAPTCHA are used as second challenge, which could lead to PHP Object injection if a plugin installed on the blog has a suitable gadge...

PT-2021-16039

Name of the Vulnerable Software and Affected Versions The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin versions prior to 2021.18 Description The issue allows high privilege users, such as admins, to set Cross-Site Scripting payloads in some settings, even when the...

Kirby .dev domains and some reverse proxy setups were treated as local

Impact About our registration block In order to protect new installations on public servers that don't have an admin account for the Panel yet, we block account registration there by default. This is a security feature, which we implemented years ago in Kirby 2. It helps to avoid that you forget...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Websense TRITON AP-WEB before 8.0.0 and V-Series 7.7 appliances allow remote attackers to inject arbitrary web script or HTML via the 1 ws-userip in the ws-encdata parameter to cve-bin/moreBlockInfo.cgi in the Data Security block page or 2...