2025

Spoofing issue in the Site Permissions component. This vulnerability was fixed in Firefox 143 and Thunderbird 143.

Integer overflow in the SVG component. This vulnerability was fixed in Firefox 143, Firefox ESR 115.28, Firefox ESR 140.

Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firefox 143, Firefox ESR

Mitigation bypass in the Web Compatibility: Tooling component. This vulnerability was fixed in Firefox 143 and Thunderbi

Spoofing issue in the WebAuthn component in Firefox for Android. This vulnerability was fixed in Firefox 143 and Thunder

Same-origin policy bypass in the Layout component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thund

Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component. This vulnerability was fi

Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143, F

Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to load but would not refresh the

The Blaze Demo Importer plugin for WordPress is vulnerable to unauthorized limited plugin install due to a missing capab

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Dolusoft Omaspot a

Cleartext Transmission of Sensitive Information vulnerability in Dolusoft Omaspot allows Interception, Privilege Escalat

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dolusoft Om

Edimax BR-6473AX v1.0.28 was discovered to contain a remote code execution (RCE) vulnerability via the Object parameter

A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the /users/adminpanel/admin/home.php?page=feedbacks

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Megatek Communicat

The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarc

The Spring Security annotation detection mechanism may not correctly resolve annotations on methods within type hierarch

There is an unauthorized access vulnerability in ZTE T5400. Due to improper permission control of the Web module interfa

There is an an information disclosure vulnerability in ZTE T5400. Due to improper configuration of the access control me

The Sparkle framework includes a helper tool Autoupdate. Due to lack of authentication of connecting clients a local unp

The Sparkle framework includes an XPC service Downloader.xpc, by default this service is private to the application its

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BGS Interactive SI

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ubit Inform

The extension "Form to Database" is susceptible to Cross-Site Scripting. This issue affects the following versions: befo

Insertion of Sensitive Information Into Sent Data vulnerability in ArgusTech BILGER allows Choosing Message Identifier.

Authorization Bypass Through User-Controlled Key vulnerability with user privileges in ArgusTech BILGER allows Exploitat

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Vegagrup Software Vega Maste

In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap api: Fix possible memory leak

In the Linux kernel, the following vulnerability has been resolved: wifi: iwl4965: Add missing check for create_singlet

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix kernel crash due to null io->bio We shou

In the Linux kernel, the following vulnerability has been resolved: media: hi846: Fix memleak in hi846_init_controls()

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix leak of 'r10bio->remaining' for reco

In the Linux kernel, the following vulnerability has been resolved: nfc: fix memory leak of se_io context in nfc_genl_s

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix "bad unlock balance" in l2cap

In the Linux kernel, the following vulnerability has been resolved: sctp: check send stream number after wait_for_sndbu

In the Linux kernel, the following vulnerability has been resolved: udf: Do not update file length for failed writes to

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix null-ptr-deref on inode->i_op in ntfs

In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix NULL dereference on q->elevator in blk_

In the Linux kernel, the following vulnerability has been resolved: rcu/rcuscale: Stop kfree_scale_thread thread(s) aft

In the Linux kernel, the following vulnerability has been resolved: samples/bpf: Fix fout leak in hbm's run_bpf_prog F

In the Linux kernel, the following vulnerability has been resolved: media: bdisp: Add missing check for create_workqueu

In the Linux kernel, the following vulnerability has been resolved: drm/client: Fix memory leak in drm_client_modeset_p

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: Put the cdns set active part outside th

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Return the firmware result upon destroyi

In the Linux kernel, the following vulnerability has been resolved: ext4: add bounds checking in get_max_inline_xattr_v

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: check for null return of devm_kzalloc(

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix use-after-free KFENCE violation dur

In the Linux kernel, the following vulnerability has been resolved: drivers: staging: rtl8723bs: Fix locking in _rtw_jo

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Remove unused nvme_ls_waitq wait que