4461 matches found
JetBrains YouTrack Authentication Bypass
The vulnerability of the JetBrains YouTrack project and task management software lies in the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
CVE-2025-31136 FreshRSS vulnerable to Cross-site Scripting by <iframe>'ing a vulnerable same-origin page in a feed entry
FreshRSS is a self-hosted RSS feed aggregator. Prior to version 1.26.2, it's possible to run arbitrary JavaScript on the feeds page. This occurs by combining a cross-site scripting XSS issue that occurs in f.php when SVG favicons are downloaded from an attacker-controlled feed containing tags...
PT-2025-23801 · Apache · Apache Http Server
Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns unvalidated user input. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issu...
CVE-2025-23107: Out-of-bounds Write
An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The lack of a length check leads to out-of-bounds writes...
CVE-2025-23103: Out-of-bounds Write
An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The lack of a length check leads to out-of-bounds writes...
CVE-2025-23097: Out-of-bounds Write
An issue was discovered in Samsung Mobile Processor Exynos 1380. The lack of a length check leads to out-of-bounds writes...
CGA-WRW4-QFP6-7H6X
Bulletin has no description...
CVE-2025-23099: Out-of-bounds Write
An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The lack of a length check leads to out-of-bounds writes...
CVE-2025-5323
A vulnerability, which was classified as problematic, has been found in fossasia open-event-server 1.19.1. This issue affects the function sendemailchangeuseremail of the file /fossasia/open-event-server/blob/development/app/api/helpers/mail.py of the component Mail Verification Handler. The...
CVE-2025-48045, CVE-2025-48046, CVE-2025-48047: MICI NetFax Server Product Vulnerabilities (NOT FIXED)
In the course of a penetration testing engagement, Rapid7 discovered three vulnerabilities in MICI Network Co., Ltd’s NetFax server versions 3.0.1.0. These issues allowed for an authenticated attack chain resulting in Remote Code Execution RCE against the device as the root user. While...
MINI-2MWM-FW95-8RJQ
Bulletin has no description...
MINI-X6FX-6CH3-QW9X
Bulletin has no description...
MINI-VXWV-H4M4-MR94
Bulletin has no description...
MINI-VPRJ-5MFW-XF95
Bulletin has no description...
MINI-RCQ2-8QHC-P2VH
Bulletin has no description...
MINI-QVX9-6RJP-WP8M
Bulletin has no description...
MINI-QPJ9-JJR4-RV3J
Bulletin has no description...
MINI-Q8P6-C6C8-F779
Bulletin has no description...