23019 matches found
Astra Linux – Vulnerability in Firefox
Setting a nameless cookie with an equals sign in its value can shadow other cookies. This occurs even if the nameless cookie is set via HTTP, and if the shadowed cookie includes the Secure attribute. This vulnerability was fixed in Firefox 141, Firefox ESR 140.1, Thunderbird 141, and Thunderbird...
Astra Linux – Vulnerability in Thunderbird, Firefox
Navigation was allowed when dragging a URL from a cross-origin iframe into the same tab, which could lead to website spoofing attacks. This vulnerability affects Firefox 109, Firefox ESR 102.7, and Thunderbird 102.7...
Astra Linux – Vulnerability in Firefox
A memory safety bug has been fixed in Firefox 152. This vulnerability was addressed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12...
Astra Linux – Vulnerability in Firefox, Thunderbird
JIT compilation errors in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...
WordPress Fluent Support Pro plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Fluent Support Pro versions = 2.3.1...
WordPress Fluent Support Pro plugin <= 2.3.1 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Fluent Support Pro versions = 2.3.1...
CVE-2026-59289
CVE-2026-59289...
Moderate: Red Hat Security Advisory: OpenJDK 11.0.32.1 ELS Security Update For Portable Linux Builds
An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...
PT-2026-79141
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built without libtiff support but with ImageMagick support can overflow the combined frame height while loading a crafted multi-page TIFF through VipsForeignLoadMagick. The vulnerable calculations i...
MINI-38F2-3JX9-QXG9
Bulletin has no description...
CVE-2026-40145
BeyondTrust Endpoint Privilege Management (Windows deployment) support utility has a tamper-protection bypass where, under certain conditions, protections on the utility process are not enforced as intended. CVSS 7.1 HIGH requires local access with high privileges. No affected versions, root caus...
vim: Vim: Arbitrary code execution via crafted step-definition patterns
A flaw was found in Vim, a command-line text editor. This vulnerability, identified as a code injection, affects the cucumber filetype plugin when Vim is configured with Ruby support. An attacker could exploit this by creating a malicious repository containing specially crafted step-definition...
CVE-2026-74355
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix RB-tree corruption in probe error path The info-node RB-tree member is zero-initialized via kzalloc. If a device does not support ATS, the devicerbtreeinsert call is skipped. If a subsequent probe step fails, the...
Denial Of Service
Spring Data Commons is vulnerable to Denial Of Service. The vulnerability is due to specially crafted HTTP requests causing excessive memory allocation when Spring Data Web Support is enabled with a controller method using @ProjectedPayload...
GO-2026-5736 vulnerabilities
Vulnerabilities for packages: dapr-fips, milvus, dapr, kcp, etcd, multicluster-controlplane-fips, rancher-support-bundle-kit, multicluster-controlplane, juicefs, kcp-fips...
.NET 8.0 security, bug fix, and enhancement update
8.0.130-1.0.1 - Add support for Oracle Linux 8.0.130-1 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235468...
CVE-2026-68758
A low-privileged authenticated user may access restricted support information under specific conditions...
EUVD-2026-57255
A low-privileged authenticated user may access restricted support information under specific conditions...
