Lucene search
+L

10554 matches found

RedHat Linux
RedHat Linux
added 2026/01/27 5:28 p.m.5 views

firefox: thunderbird: Clickjacking issue, information disclosure in the PDF Viewer component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue, information disclosure in the PDF Viewer component...

4.3CVSS5.7AI score0.00284EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2026/01/27 5:16 p.m.4 views

firefox: thunderbird: Clickjacking issue, information disclosure in the PDF Viewer component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue, information disclosure in the PDF Viewer component...

4.3CVSS5.7AI score0.00284EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2026/01/27 5:10 p.m.5 views

firefox: thunderbird: Clickjacking issue, information disclosure in the PDF Viewer component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue, information disclosure in the PDF Viewer component...

4.3CVSS5.7AI score0.00284EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2026/01/27 6:58 a.m.5 views

firefox: thunderbird: Clickjacking issue, information disclosure in the PDF Viewer component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Clickjacking issue, information disclosure in the PDF Viewer component...

4.3CVSS5.7AI score0.00284EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2026/01/27 12:0 a.m.8 views

RHEL 9 : thunderbird (RHSA-2026:1413)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:1413 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: Spoofing issue in the Downloads Panel component...

9.8CVSS6AI score0.0057EPSS
Exploits0References28
RedhatCVE
RedhatCVE
added 2026/01/24 3:18 p.m.12 views

CVE-2026-24588

Missing Authorization vulnerability in topdevs Smart Product Viewer smart-product-viewer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Product Viewer: from n/a through = 1.5.4...

4.3CVSS5.3AI score0.00235EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/24 12:0 a.m.4 views

SUSE SLED15: MozillaFirefox / MozillaFirefox-branding-upstream / etc (SUSE-SU-2026:0260-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0260-1 advisory. Update to Firefox Extended Support Release 140.7.0 ESR bsc1256340. - MFSA 2026-03 CVE-2026-0877:...

9.8CVSS6.8AI score0.0057EPSS
Exploits0References28
Tenable Nessus
Tenable Nessus
added 2026/01/24 12:0 a.m.9 views

AlmaLinux 9 : thunderbird (ALSA-2026:0924)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:0924 advisory. firefox: Spoofing issue in the Downloads Panel component CVE-2025-14327 firefox: Use-after-free in the JavaScript: GC component CVE-2026-0885 firefox:...

9.8CVSS5.8AI score0.0057EPSS
Exploits0References15
RedhatCVE
RedhatCVE
added 2026/01/23 9:15 p.m.5 views

CVE-2025-64252

Server-Side Request Forgery SSRF vulnerability in Marco Milesi ANAC XML Viewer anac-xml-viewer allows Server Side Request Forgery.This issue affects ANAC XML Viewer: from n/a through = 1.8.2...

4.9CVSS5.4AI score0.00194EPSS
Exploits0References1
NVD
NVD
added 2026/01/23 3:16 p.m.11 views

CVE-2026-24588

Missing Authorization vulnerability in topdevs Smart Product Viewer smart-product-viewer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Product Viewer: from n/a through = 1.5.4...

4.3CVSS0.00235EPSS
Exploits0References1
CVE
CVE
added 2026/01/23 2:29 p.m.18 views

CVE-2026-24588

CVE-2026-24588 is a missing authorization/broken access control vulnerability in the WordPress plugin Smart Product Viewer (versions

4.3CVSS5.4AI score0.00235EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/23 2:29 p.m.2 views

CVE-2026-24588 WordPress Smart Product Viewer plugin <= 1.5.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in topdevs Smart Product Viewer smart-product-viewer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Product Viewer: from n/a through = 1.5.4...

4.3CVSS5.4AI score0.00235EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/23 2:29 p.m.37 views

CVE-2026-24588 WordPress Smart Product Viewer plugin <= 1.5.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in topdevs Smart Product Viewer smart-product-viewer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Product Viewer: from n/a through = 1.5.4...

4.3CVSS0.00235EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:29 p.m.4 views

CVE-2026-24588

Missing Authorization vulnerability in topdevs Smart Product Viewer smart-product-viewer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smart Product Viewer: from n/a through = 1.5.4...

4.3CVSS5.9AI score0.00235EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/23 12:0 a.m.13 views

PT-2026-4425

Name of the Vulnerable Software and Affected Versions topdevs Smart Product Viewer versions through 1.5.4 Description An issue exists in topdevs Smart Product Viewer related to incorrectly configured access control security levels, allowing for missing authorization. The vulnerability allows...

4.3CVSS5.3AI score0.00235EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/01/23 12:0 a.m.13 views

WordPress plugin Smart Product Viewer has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

4.3CVSS5.8AI score0.00235EPSS
Exploits0References1
NVD
NVD
added 2026/01/22 5:16 p.m.5 views

CVE-2025-64252

Server-Side Request Forgery SSRF vulnerability in Marco Milesi ANAC XML Viewer anac-xml-viewer allows Server Side Request Forgery.This issue affects ANAC XML Viewer: from n/a through = 1.8.2...

4.9CVSS0.00194EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 4:51 p.m.2 views

CVE-2025-64252 WordPress ANAC XML Viewer plugin <= 1.8.2 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Marco Milesi ANAC XML Viewer anac-xml-viewer allows Server Side Request Forgery.This issue affects ANAC XML Viewer: from n/a through = 1.8.2...

4.9CVSS5.9AI score0.00194EPSS
Exploits0References1
CVE
CVE
added 2026/01/22 4:51 p.m.11 views

CVE-2025-64252

CVE-2025-64252 is a Server-Side Request Forgery (SSRF) vulnerability in the WordPress plugin ANAC XML Viewer (Marco Milesi) affecting ANAC XML Viewer versions up to 1.8.2. Multiple connected sources (NVD, Red Hat, CVE listing, PatchStack, PT Security) confirm the SSRF issue and indicate affected ...

4.9CVSS5.4AI score0.00194EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:51 p.m.1 views

CVE-2025-64252

Server-Side Request Forgery SSRF vulnerability in Marco Milesi ANAC XML Viewer anac-xml-viewer allows Server Side Request Forgery.This issue affects ANAC XML Viewer: from n/a through = 1.8.2...

4.9CVSS5.3AI score0.00194EPSS
Exploits0References2
Rows per page
Query Builder