CVE-2025-21066: Out-of-bounds Read

Out-of-bounds read in the SPI decoder in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory...

CVE-2025-21057: Undefined Security Weakness

Use of implicit intent for sensitive communication in Samsung Notes prior to version 4.4.30.63 allows local attackers to access shared notes...

SAMSUNG Notes 安全漏洞

SAMSUNG Notes is a software application from Samsung South Korea. It is used to provide a record function. SAMSUNG Notes suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to write to out-of-bounds memory...

SAMSUNG Notes 安全漏洞

SAMSUNG Notes is a software application from Samsung South Korea. It is used to provide a record function. SAMSUNG Notes suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to access out-of-bounds memory...

PT-2025-41529

Name of the Vulnerable Software and Affected Versions Samsung Notes versions prior to 4.4.30.63 Description An out-of-bounds read issue exists in the parsing of image data. This can allow a local attacker to access memory outside of the intended boundaries. Recommendations Update Samsung Notes to...

CVE-2025-21069: Out-of-bounds Read

Out-of-bounds read in the parsing of image data in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory...

CVE-2025-21067: Out-of-bounds Read

Out-of-bounds read in the allocation of image buffer in Samsung Notes prior to version 4.4.30.63 allows local attackers to access out-of-bounds memory...

SAMSUNG Notes 安全漏洞

SAMSUNG Notes is a software application from Samsung South Korea. It is used to provide a record function. SAMSUNG Notes suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to access out-of-bounds memory...

PT-2025-41526

Name of the Vulnerable Software and Affected Versions Samsung Notes versions prior to 4.4.30.63 Description An out-of-bounds read issue exists in the SPI decoder. This allows local attackers to access memory outside of the intended boundaries. Recommendations Update Samsung Notes to version...

PT-2025-41530

Name of the Vulnerable Software and Affected Versions Samsung Notes versions prior to 4.4.30.63 Description An out-of-bounds write issue exists in the SPI decoder of Samsung Notes. This allows a local attacker to write to memory outside of the allocated buffer. Recommendations Update Samsung Note...

SAMSUNG Notes 安全漏洞

SAMSUNG Notes is a software application from Samsung South Korea. It is used to provide a record function. SAMSUNG Notes has an information disclosure vulnerability that can be exploited by an attacker to access shared notes...

PT-2025-41527

Name of the Vulnerable Software and Affected Versions Samsung Notes versions prior to 4.4.30.63 Description An out-of-bounds read issue exists in the allocation of image buffers. This can allow a local attacker to access memory outside of the intended boundaries. Recommendations Update Samsung...

SAMSUNG Notes 安全漏洞

SAMSUNG Notes is a software application from Samsung South Korea. It is used to provide a record function. SAMSUNG Notes suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to access out-of-bounds memory...

PT-2025-41517

Name of the Vulnerable Software and Affected Versions Samsung Notes versions prior to 4.4.30.63 Description A flaw exists in Samsung Notes due to the use of implicit intents for sensitive communication. This allows a local attacker to access shared notes. Recommendations Update Samsung Notes to...

CVE-2025-55200

BigBlueButton is an open-source virtual classroom. In versions prior to 3.0.13, the "Shared Notes" feature contains a Stored Cross-Site Scripting XSS vulnerability with the input location being the "Username" field and the output location on the "Shared Notes" page, when a user with a malicious...

CVE-2025-55200

BigBlueButton has a Stored XSS vulnerability in the Shared Notes feature prior to version 3.0.13. The issue arises from unsafely handling the Username field, allowing a low-privilege user to inject arbitrary JavaScript that can execute in the context of higher-privileged users (e.g., Admins) who ...

CVE-2025-55200 BigBlueButton vulnerable to Stored XSS via name of user at Shared Notes

BigBlueButton is an open-source virtual classroom. In versions prior to 3.0.13, the "Shared Notes" feature contains a Stored Cross-Site Scripting XSS vulnerability with the input location being the "Username" field and the output location on the "Shared Notes" page, when a user with a malicious...

CVE-2025-55200 BigBlueButton vulnerable to Stored XSS via name of user at Shared Notes

BigBlueButton is an open-source virtual classroom. In versions prior to 3.0.13, the "Shared Notes" feature contains a Stored Cross-Site Scripting XSS vulnerability with the input location being the "Username" field and the output location on the "Shared Notes" page, when a user with a malicious...

EUVD-2025-33584

BigBlueButton is an open-source virtual classroom. In versions prior to 3.0.13, the "Shared Notes" feature contains a Stored Cross-Site Scripting XSS vulnerability with the input location being the "Username" field and the output location on the "Shared Notes" page, when a user with a malicious...

CVE-2025-55200 BigBlueButton vulnerable to Stored XSS via name of user at Shared Notes

BigBlueButton is an open-source virtual classroom. In versions prior to 3.0.13, the "Shared Notes" feature contains a Stored Cross-Site Scripting XSS vulnerability with the input location being the "Username" field and the output location on the "Shared Notes" page, when a user with a malicious...