203161 matches found
Mozilla Thunderbird security vulnerabilities
A security vulnerability exists in Mozilla Thunderbird versions prior to 153.6 and 159. This vulnerability arises when, when replying, forwarding, or editing specially crafted emails as new ones, part of the content from another email within the same folder may be embedded without any warning tha...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from use-after-free issues in the Layout: Scrolling and Overflow component...
Mozilla Thunderbird security vulnerabilities
Versions prior to 159 and 153.6 of Mozilla Thunderbird contain a security vulnerability. This vulnerability arises because messages containing OpenPGP key attachments are automatically loaded, without any restrictions on marking such attachments as external files pointing to arbitrary URLs. As a...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 115.44, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from a use-after-free issue in the DOM: Core &...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from use-after-free issues in the Graphics component, potentially leading to sandbox...
Mozilla Firefox security vulnerabilities
Mozilla Firefox has a security vulnerability stemming from use-after-free issues in its Panning and Zooming components...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from use-after-free issues in the Layout: Text and Fonts component...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 115.44, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from use-after-free issues in the CSS parsing a...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from a use-after-free issue in the Graphics component...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 115.44, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from incorrect boundary conditions in the Layou...
Mozilla Firefox security vulnerabilities
Mozilla Firefox has a security vulnerability stemming from a use-after-free issue in the Networking: WebSockets component...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from use-after-free issues in the Layout: Grid component, which may lead to memory...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 115.44, and Firefox ESR versions prior to 153.6; it also exists in Thunderbird versions prior to 159 and prior to 153.6. This vulnerability stems from incorrect boundary conditions in the...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from a use-after-free issue in the JavaScript: GC component, which may lead to memory...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 115.44, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from use-after-free issues in the WebRTC:...
Mozilla Firefox security vulnerabilities
Mozilla Firefox has a security vulnerability stemming from an invalid pointer issue in its JavaScript engine’s JIT component, which may lead to crashes...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 115.44, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from a use-after-free issue in the Layout...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from incorrect boundary conditions in the WebRTC component...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 115.44, 153.6, and 159, as well as Thunderbird versions prior to 153.6 and 159. This vulnerability stems from uninitialized memory in the Audio/Video component, potentially leading to information disclosure...
Mozilla Firefox security vulnerabilities
Mozilla Firefox has a security vulnerability stemming from a site isolation issue in the Networking: HTTP component...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 115.44, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from incorrect boundary conditions in the...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from an information disclosure issue in the Networking: DNS component, which may lead...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 115.44, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from a post-release reuse issue in the...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from use-after-free issues in the Widget component, potentially leading to sandbox...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from an uninitialized memory issue in the Graphics: Canvas2D component...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from a site isolation issue within Service Workers components in the DOM...
Mozilla Firefox security vulnerabilities
Mozilla Firefox has a security vulnerability stemming from post-free reuse in its DOM: Core & HTML components...
Agent2Agent A2A Go SDK resource management error vulnerability
Agent2Agent A2A Go SDK versions 2.4.0 and earlier contain a resource management error vulnerability. This vulnerability arises from manipulation of the Cancel function within the file internal/taskexec/distributedmanager.go in the Distributed Manager component, potentially leading to a denial of...
WatchGuard Fireware OS authorization issue vulnerability
Security vulnerabilities exist in WatchGuard Fireware OS versions from 2025.1 up to and including 2026.4, as well as versions 12.7 through 12.12.4. These vulnerabilities stem from improper authentication within the AuthPoint multi-factor authentication process. As a result, locally unauthenticate...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 115.44, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from a use-after-free issue in the Graphics:...
TeamViewer Full Client permission and access control issue vulnerability
Versions prior to TeamViewer Full Client 15.83, TeamViewer Host 15.83, and TeamViewer Remote Management Monitoring 26.10.1 contain a privilege escalation and access control vulnerability stemming from improper IPC communication access controls. This vulnerability may allow locally authenticated...
Eaton easyE4 authorization issue vulnerability
Versions prior to 2.46 of the Eaton easyE4 contain an authorization issue vulnerability. This vulnerability stems from insufficient strength in password policies, potentially allowing attackers to obtain password hashes and carry out offline brute-force attacks to recover user credentials...
Tanium Comply authorization issue vulnerability
Versions prior to Tanium Comply 2.32.263, versions prior to 2.35.323, and versions prior to 2.37.326 contain an authorization issue vulnerability stemming from improper access control, which may lead to unauthorized access...
Strapi Open Source and Enterprise Headless CMS server request forgery vulnerability
The Strapi Open Source and Enterprise Headless CMS versions 5.51.0 contain a server-side request forgery vulnerability. This vulnerability arises because the webhook distributor automatically follows HTTP redirects; without proper redirection, IP resolution or RFC1918/link-local boundary checks a...
Google Chrome resource management error vulnerability
Versions of Google Chrome prior to 156.0.8078.73 contain a resource management error vulnerability. This vulnerability stems from use-after-free issues in Compositing; remote attackers can exploit it by sending specially crafted HTML pages to execute arbitrary code within a sandbox...
Mozilla Firefox security vulnerabilities
Mozilla Firefox has a security vulnerability stemming from a race condition in the Disability Access APIs component...
Google Chrome input validation error vulnerability
Google Chrome versions prior to 156.0.8078.73 contain an input validation error vulnerability. This vulnerability stems from improper SVG input validation and may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...
Hitachi HiRDB input validation error vulnerability
Versions 10-00 through 10-12-01 of Hitachi HiRDB, versions 9-00 through 09-66-22 and earlier of HiRDB Server, versions 9-00 through 09-66/V and earlier of HiRDB Server with Additional Function, versions 9-02 through 09-66-22 and earlier of HiRDB Server Version 9 32, and versions 9-00 through...
REDAXO CMS core authorization issue vulnerability
Versions of REDAXO CMS prior to 5.21.4 contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks in the front-end preview modes for structure/version and structure/history; no validation is performed on the category or clang permissions of previewe...
Semantic MediaWiki authorization issue vulnerability
Versions 2.5.0 through 7.3.1 of Semantic MediaWiki contain an authorization issue vulnerability. This vulnerability stems from improper authorization checks; regular editors can use the “Is edit protected” annotation to permanently protect pages, thereby locking out other editors and administrato...
ggml llama.cpp buffer error vulnerability
Versions of ggml llama.cpp from b1046 through b2731 contain a buffer error vulnerability. This vulnerability arises because llamamodelloader fails to properly handle arbitrary 64-bit tensor offsets within specially crafted or truncated GUF model files, leading to an out-of-bounds read. This may...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 115.44, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from incorrect boundary conditions in SVG...
Adobe Connect Desktop App code injection vulnerability
The Adobe Connect Desktop App versions 2026.8.51 Win and earlier, 2026.08.45 Mac Silicon and earlier, and 2026.01.39 Mac Intel and earlier, as well as the Adobe Connect Android Mobile App version 4.4 and earlier, contain a code injection vulnerability. This vulnerability stems from improper contr...
Hitachi Energy CoreTec 5 command injection vulnerability
Versions 5.3.0 through 5.0.0 of Hitachi Energy CoreTec and versions 3.0.0 through 3.4.0 of CoreTec contain a command injection vulnerability. This vulnerability arises because the configuration daemon’s time synchronization handler, when processing updates to timezone configurations, concatenates...
SMCI MBD-X12STW-F command injection vulnerability
The SMCI MBD-X12STW-F version 01.02.08 contains a command injection vulnerability. This vulnerability stems from insufficient input filtering; attackers can inject command payloads into BMC functionality. When relevant services restart, these payloads may be executed, resulting in OS command...
MISP Project misp-guard input validation error vulnerability
Versions of MISP prior to misp-guard 1.4 contain a security vulnerability. This vulnerability stems from incomplete validation checks on required taxonomy tags; only one tag is verified against an allowed list, while all tags are not. As a result, highly sensitive data may bypass policy...
Agent2Agent A2A JavaScript SDK race condition vulnerability
Agent2Agent A2A JavaScript SDK versions 1.1.0 and earlier contain a race condition vulnerability. This vulnerability stems from a race condition in the function ResultManager.applyStatusUpdate within the file src/server/resultmanager.ts in the Task Status Update Handler component. Exploitation of...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from a use-after-free issue in the JavaScript: GC component, which may lead to memory...
Mozilla Firefox security vulnerabilities
A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 115.44, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from an information disclosure issue in the CSS...
Agent2Agent A2A Java SDK resource management error vulnerability
Agent2Agent A2A Java SDK versions 1.2.0.Final and earlier contain a resource management error vulnerability. This vulnerability arises from excessive resource consumption caused by operations in the queue.offer function within the ChildQueue component; attackers can exploit this to launch remote...