7852 matches found
CVE-2024-0970: Undefined Security Weakness
This User Activity Tracking and Log WordPress plugin before 4.1.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value...
CVE-2024-6335: Improper Neutralization of Input During Web Page Generation
The Tracking Code Manager WordPress plugin before 2.3.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2025-3932
It was possible to craft an email that showed a tracking link as an attachment. If the user attempted to open the attachment, Thunderbird automatically accessed the link. The configuration to block remote content did not prevent that. Thunderbird has been fixed to no longer allow access to web...
CVE-2025-3932
It was possible to craft an email that showed a tracking link as an attachment. If the user attempted to open the attachment, Thunderbird automatically accessed the link. The configuration to block remote content did not prevent that. Thunderbird has been fixed to no longer allow access to web...
DEBIAN-CVE-2025-3932
It was possible to craft an email that showed a tracking link as an attachment. If the user attempted to open the attachment, Thunderbird automatically accessed the link. The configuration to block remote content did not prevent that. Thunderbird has been fixed to no longer allow access to web...
UBUNTU-CVE-2025-3932
It was possible to craft an email that showed a tracking link as an attachment. If the user attempted to open the attachment, Thunderbird automatically accessed the link. The configuration to block remote content did not prevent that. Thunderbird has been fixed to no longer allow access to web...
CVE-2025-3932 Tracking Links in Attachments Bypassed Remote Content Blocking
It was possible to craft an email that showed a tracking link as an attachment. If the user attempted to open the attachment, Thunderbird automatically accessed the link. The configuration to block remote content did not prevent that. Thunderbird has been fixed to no longer allow access to web...
CVE-2025-3932
It was possible to craft an email that showed a tracking link as an attachment. If the user attempted to open the attachment, Thunderbird automatically accessed the link. The configuration to block remote content did not prevent that. Thunderbird has been fixed to no longer allow access to web...
kernel: x86/mm/pat: fix VM_PAT handling in COW mappings
CVE-2024-35877 pertains to a flaw in the Linux kernel's handling of Page Attribute Table PAT settings during Copy-On-Write COW operations. When a write operation triggers a COW event, the kernel may replace the original page table entries PTEs with anonymous folios. This replacement disrupts the...
Mozilla Thunderbird < 138.0.1
The version of Thunderbird installed on the remote Windows host is prior to 138.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-35 advisory. - It was possible to craft an email that showed a tracking link as an attachment. If the user attempted to open th...
CVE-2025-3932: Authentication Bypass Using an Alternate Path or Channel
It was possible to craft an email that showed a tracking link as an attachment. If the user attempted to open the attachment, Thunderbird automatically accessed the link. The configuration to block remote content did not prevent that. Thunderbird has been fixed to no longer allow access to web...
Mozilla Thunderbird 安全漏洞
Mozilla Thunderbird is a suite of e-mail client software from the Mozilla Foundation in the United States that is separate from the Mozilla Application Suite. The software supports the IMAP and POP mail protocols as well as the HTML mail format. A security vulnerability exists in Mozilla...
Mozilla Thunderbird < 128.10.1
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 128.10.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-34 advisory. - It was possible to craft an email that showed a tracking link as an attachment. If the user attempted...
CVE-2025-45858
creationtimestamp| type| source ---|---|--- 2025-05-13 16:48:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp2wsukc5s24 2025-05-13 19:43:49+00:00| seen| https://t.me/cvedetector/25207...
CVE-2025-30397
creationtimestamp| type| source ---|---|--- 2025-05-13 16:27:02+00:00| seen| https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review 2025-05-13 18:15:19+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lp33p64qow2w 2025-05-13 18:51:58+00:00| seen|...
CVE-2025-40566
creationtimestamp| type| source ---|---|--- 2025-05-13 09:54:54+00:00| seen| https://bsky.app/profile/potato.software/post/3lp27qebazh2e 2025-05-13 10:30:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16105 2025-05-13 10:52:36+00:00| seen|...
kernel: net/mlx5e: CT: Fix null-ptr-deref in add rule err flow
A flaw was found in the Linux kernel's Mellanox mlx5 network driver. An uninitialized pointer is improperly accessed within the driver's error-handling path when adding connection tracking rules. A local user can exploit this vulnerability during a rule configuration failure, triggering a null...
CVE-2024-28956
Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...
PT-2025-21188
Name of the Vulnerable Software and Affected Versions: Thunderbird versions prior to 128.10.1 Thunderbird versions prior to 138.0.1 Description: The issue allowed an attacker to craft an email that showed a tracking link as an attachment. When the user attempted to open the attachment, Thunderbir...
