22945 matches found
Code execution vulnerability in multiple Mozilla products (CNVD-2026-15388)
Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A code execution vulnerability exists in several Mozilla products, which...
Integer Overflow Vulnerability in Multiple Mozilla Products (CNVD-2026-15384)
Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. An integer overflow vulnerability exists in multiple Mozilla products,...
Security Bypass Vulnerability in Multiple Mozilla Products (CNVD-2026-15389)
Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A security bypass vulnerability exists in several Mozilla products, whic...
Elevation of Privilege Vulnerability in Multiple Mozilla Products (CNVD-2026-13447)
Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. An elevation of privilege vulnerability exists in several Mozilla produc...
CVE-2026-31826
pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rather large /Length value, regardless of the actual data length inside the stream. Thi...
Moderate: Red Hat Security Advisory: 389-ds-base security update
An update for 389-ds-base is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
Directory Traversal
Overview @appium/support is a Support libs used across Appium packages Affected versions of this package are vulnerable to Directory Traversal in the extractAllTo function. An attacker can write arbitrary files outside the intended extraction directory by supplying a crafted ZIP archive containin...
MediaTek Tablet Vulnerabilities, March 2026 - Lenovo Support US
No description provided...
CVE-2026-30973
Appium is an automation framework that provides WebDriver-based automation possibilities for a wide range platforms. Prior to 7.0.6, @appium/support contains a ZIP extraction implementation extractAllTo via ZipExtractor.extract with a path traversal Zip Slip check that is non-functional. The chec...
CVE-2026-30973 Zip Slip arbitrary file write in @appium/support ZIP extraction
Appium is an automation framework that provides WebDriver-based automation possibilities for a wide range platforms. Prior to 7.0.6, @appium/support contains a ZIP extraction implementation extractAllTo via ZipExtractor.extract with a path traversal Zip Slip check that is non-functional. The chec...
CVE-2026-30973
Appium vulnerability CVE-2026-30973 affects the @appium/support ZIP extraction path. Before 7.0.6, the non-functional path-traversal check in extractAllTo() (ZipExtractor.extract()) creates an Error but never throws it, enabling malicious ZIP entries with ../ components to write outside the desti...
CVE-2026-30973 Zip Slip arbitrary file write in @appium/support ZIP extraction
Appium is an automation framework that provides WebDriver-based automation possibilities for a wide range platforms. Prior to 7.0.6, @appium/support contains a ZIP extraction implementation extractAllTo via ZipExtractor.extract with a path traversal Zip Slip check that is non-functional. The chec...
CVE-2026-30973 Zip Slip arbitrary file write in @appium/support ZIP extraction
Appium is an automation framework that provides WebDriver-based automation possibilities for a wide range platforms. Prior to 7.0.6, @appium/support contains a ZIP extraction implementation extractAllTo via ZipExtractor.extract with a path traversal Zip Slip check that is non-functional. The chec...
Exploit for CVE-2026-2472
🚨 CVE-2026-2472-Vertex-AI-SDK-Google-Cloud - Simple Proof of C...
Smart Connect Driver Vulnerabilities - Lenovo Support US
No description provided...
MediaTek WLAN Vulnerabilities, March 2026 - Lenovo Support US
No description provided...
March 10, 2026—KB5078752 (OS Build 17763.8511)
None None...
KB5078738: Cumulative security update for Internet Explorer: March 10, 2026
None None...