EUVD-2025-37668

A buffer overflow was addressed with improved bounds checking. This issue is fixed in Safari 26.1, visionOS 26.1, watchOS 26.1, iOS 26.1 and iPadOS 26.1, tvOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash...

EUVD-2025-37688

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.1, visionOS 26.1, watchOS 26.1, iOS 26.1 and iPadOS 26.1, tvOS 26.1. Processing maliciously crafted web content may lead to memory corruption...

MINI-989F-4X6V-8PGP

Bulletin has no description...

MINI-9JQM-Q98Q-6RXW

Bulletin has no description...

EUVD-2025-36597

Not used...

EUVD-2025-35307

This High severity Path Traversal Arbitrary Write vulnerability was introduced in versions: 9.12.0, 10.3.0 and remain present in 11.0.0 of Jira Software Data Center and Server. This Path Traversal Arbitrary Write vulnerability, with a CVSS Score of 8.7, allows an attacker to modify any filesystem...

CVE-2025-8048

External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerability could allow a user to submit a stored local file path and then download the specified file from the system by requesting the stored document ID. This issue affects Flipper: 3.1.2...

CVE-2025-8048 External Control of File path vulnerability has been discovered on Openext Flipper.

External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerability could allow a user to submit a stored local file path and then download the specified file from the system by requesting the stored document ID. This issue affects Flipper: 3.1.2...

EUVD-2025-34498

Not used...

EUVD-2015-7325

Malware in sbrugna...

EUVD-2019-5893

Malware in sbrugna...

EUVD-2025-31670

Malicious code in bioql PyPI...

EUVD-2025-32071

Malicious code in bioql PyPI...

EUVD-2025-31813

Malicious code in bioql PyPI...

EUVD-2025-30292

Malicious code in bioql PyPI...

CVE-2019-3965

In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the documentid parameter. This could allow an attacker to execute arbitrary code in the context of a user's session...

CGA-MMGJ-2Q2J-78V4

Bulletin has no description...

CVE-2024-51210

The open-source collaborative editor Firepad (versions 1.5.11 and earlier ) is vulnerable to Sensitive Information Exposure due to improper access controls. A remote attacker with knowledge of a pad ID can retrieve the current text of a document along with all content previously pasted into it. W...

CVE-2023-43900

Insecure Direct Object References IDOR in EMSigner v2.8.7 allow attackers to gain unauthorized access to application content and view sensitive data of other users via manipulation of the documentID and EncryptedDocumentId parameters...

CVE-2023-34958: Incorrect Authorization

Incorrect access control in Chamilo 1.11. up to 1.11.18 allows a student subscribed to a given course to download documents belonging to another student if they know the document's ID...