CVE-2025-66215

OpenSC before 0.27.0 is affected by a stack-buffer-overflow WRITE in card-oberthur. An attacker with physical access can trigger it by presenting a crafted USB device or smart card that replies to APDUs with specially crafted responses. The issue is mitigated by upgrading to version 0.27.0, which...

CVE-2020-15660

Missing checks on Content-Type headers in geckodriver before 0.27.0 could lead to a CSRF vulnerability, that might, when paired with a specifically prepared request, lead to remote code execution...