1166 matches found
Exploit for CVE-2026-22812
CVE-2026-22812 Overview A Python exploitation tool for Ope...
CVE-2026-23839
Movary is a web application to track, rate and explore your movie watch history. Due to insufficient input validation, attackers can trigger cross-site scripting payloads in versions prior to 0.70.0. The vulnerable parameter is ?categoryUpdated=. Version 0.70.0 fixes the issue...
CVE-2026-0696
In ConnectWise PSA versions older than 2026.1, certain session cookies were not set with the HttpOnly attribute. In some scenarios, this could allow client-side scripts access to session cookie values...
CVE-2026-0696 Session Cookies Missing HttpOnly Attribute
In ConnectWise PSA versions older than 2026.1, certain session cookies were not set with the HttpOnly attribute. In some scenarios, this could allow client-side scripts access to session cookie values...
Mozilla Thunderbird < 147.0
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 147.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-04 advisory. - Memory safety bugs present in Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of...
CVE-2025-71109 MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits
In the Linux kernel, the following vulnerability has been resolved: MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits Since commit e424054000878 "MIPS: Tracing: Reduce the overhead of dynamic Function Tracer", the macro UASMiLAmostly has been used, and this macro can...
SUSE CVE-2026-0877
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7...
Adobe Substance 3D Designer < 15.1.0 Out-of-bounds Read Vulnerability (APSB26-13)
The version of Adobe Substance 3D Designer installed on the remote host is prior to 15.1.0. It is, therefore, affected by an Out-of-bounds Read vulnerability that could lead to memory exposure as referenced in the APSB26-13 advisory. An attacker could leverage this vulnerability to disclose...
CVE-2026-21303
Substance3D Modeler v1.22.4 and earlier are affected by an Out-of-bounds Read (CWE-125) that could disclose memory contents. Exploitation requires a user to open a malicious file, potentially leading to memory disclosure. Adobe APSB26-08 notes a fixed update to 1.22.5; apply the security update t...
CVE-2026-0889
Denial-of-service in the DOM: Service Workers component. This vulnerability was fixed in Firefox 147 and Thunderbird 147...
CVE-2025-68146 affecting package python-filelock for versions less than 3.20.1-1
CVE-2025-68146 affecting package python-filelock for versions less than 3.20.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-44905 affecting package hdf5 for versions less than 1.14.6-1
CVE-2025-44905 affecting package hdf5 for versions less than 1.14.6-1. A patched version of the package is available...
CVE-2025-68972 affecting package gnupg2 for versions less than 2.4.9-1
CVE-2025-68972 affecting package gnupg2 for versions less than 2.4.9-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-13837 affecting package python3 for versions less than 3.12.9-7
CVE-2025-13837 affecting package python3 for versions less than 3.12.9-7. A patched version of the package is available...
CVE-2019-11951
A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...
Microsoft Edge (Chromium) < 143.0.3650.139 (CVE-2026-0628)
The version of Microsoft Edge installed on the remote Windows host is prior to 143.0.3650.139. It is, therefore, affected by a vulnerability as referenced in the January 9, 2026 advisory. - Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an attacker...
CVE-2025-68873
CVE-2025-68873 is a Reflected XSS in PRIMER by chloédigital (WordPress plugin) affecting PRIMER versions up to 1.0.25. The Wordfence Vulnerability Report lists it as Unpatched; no exploitation details are provided in the connected docs beyond the vulnerability type and affected software.
CVE-2025-7424 affecting package libxslt for versions less than 1.1.34-10
CVE-2025-7424 affecting package libxslt for versions less than 1.1.34-10. A patched version of the package is available...