firefox: thunderbird: Same-origin policy bypass in the DOM: Workers component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the DOM: Workers component...

ECHO-F49D-2A75-50EB

Bulletin has no description...

MINI-MQ58-852P-FHCQ

Bulletin has no description...

MINI-53XH-8CM3-F5X2

Bulletin has no description...

CVE-2025-65959

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.37, a Stored XSS vulnerability was discovered in Open-WebUI's Notes PDF download functionality. An attacker can import a Markdown file containing malicious SVG tags into Notes, allowing...

CGA-2875-VR2C-9F8F

Bulletin has no description...

CGA-8GWQ-8CRQ-XJR3

Bulletin has no description...

MINI-5FX7-M4MX-PGGJ

Bulletin has no description...

EUVD-2025-201351

Not used...

EUVD-2025-201347

Not used...

EUVD-2025-201345

Not used...

EUVD-2025-201344

Not used...

EUVD-2025-201350

Not used...

EUVD-2025-201348

Not used...

EUVD-2025-201346

Not used...

EUVD-2025-201352

Not used...

MINI-2JGW-38RM-XPRP

Bulletin has no description...

[SECURITY] Fedora 43 Update: xpdf-4.06-1.fc43

Xpdf is an X Window System based viewer for Portable Document Format PDF files. Xpdf is a small and efficient program which uses standard X fonts...

EUVD-2025-201315

Advantech iView versions 5.7.05.7057 and prior do not properly sanitize SNMP v1 trap Port 162 requests, which could allow an attacker to inject SQL commands...

EUVD-2025-201314

A flaw has been found in youlaitech youlai-mall 1.0.0/2.0.0. Affected is the function getById/updateAddress/deleteAddress of the file /mall-ums/app-api/v1/addresses/. Executing manipulation can lead to improper control of dynamically-identified variables. The attack can be executed remotely. The...