261993 matches found
CVE-2026-66405
creationtimestamp| type| source ---|---|--- 2026-07-31 04:45:25+00:00| seen| https://jvn.jp/en/vu/JVNVU92804348...
CVE-2026-57669
creationtimestamp| type| source ---|---|--- 2026-07-31 04:44:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrw5fetvn42q...
CVE-2026-56672
ComfyUI is a node-based diffusion model GUI, API, and backend. Prior to 0.28.0, GET /userdata/file served user-controlled HTML and SVG files with extension-derived content types, allowing stored cross-site scripting in the ComfyUI origin and access to browser-stored API tokens, settings, workflow...
CVE-2026-43830
Full details and mitigation steps are currently restricted and will be published at a later date...
CVE-2026-62323 Cloudreve: Unauthorized file write via WOPI view sessions whose access token secret is ignored
Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, ViewerSessionValidation uses only the session-id prefix of a WOPI access token and does not enforce the requested viewer action, allowing a malicious or compromised WOPI viewer with a view session to forge the token...
CVE-2026-62323 Cloudreve: Unauthorized file write via WOPI view sessions whose access token secret is ignored
Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, ViewerSessionValidation uses only the session-id prefix of a WOPI access token and does not enforce the requested viewer action, allowing a malicious or compromised WOPI viewer with a view session to forge the token...
CVE-2026-43830
CVE-2026-43830 describes a command injection vulnerability in the firmware upgrade file verification process. Exploitation could allow an attacker to execute arbitrary commands during firmware upgrade. Documents provide no vendor/product/version details or remediation steps; no exploit status is ...
GHSA-XJFQ-6RHW-XJ37 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-2H4F-4MX5-4HWR vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-8VPQ-9F8G-39VM vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-573V-JGF3-JX4P vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-97HW-VMR9-C44J vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-PP6F-JF25-X95P vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-52H6-3XQW-4R8V vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-FRVF-6637-JQ2Q vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-M5J7-35RX-PHQ8 vulnerabilities
Vulnerabilities for packages: firefox...
EUVD-2026-51335
An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...
CVE-2026-18015
An inappropriate implementation flaw was found in the Tint component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523698428...