EUVD-2025-210096

A cross-site request forgery CSRF vulnerability has been reported to affect Notification Center. The remote attackers can then exploit the vulnerability to gain privileges or hijack user identities. We have already fixed the vulnerability in the following version: Notification Center 1.10.0.3291...

CVE-2025-58468

CVE-2025-58468 concerns a cross-site request forgery (CSRF) affecting Notification Center . Multiple sources confirm that versions prior to 1.10.0.3291 are vulnerable, enabling remote attackers to gain privileges or hijack user identities. The advisory notes the flaw has been fixed in Notificatio...

PT-2026-48355

Name of the Vulnerable Software and Affected Versions Notification Center versions prior to 1.10.0.3291 Description A cross-site request forgery CSRF issue exists, which is a type of attack that tricks a victim into submitting a malicious request. Remote attackers can exploit this to gain...

QNAP Systems Notification Center 跨站请求伪造漏洞

QNAP Systems Notification Center is a system event alert and notification software developed by QNAP Systems, a company based in Taiwan, China. Versions of QNAP Systems Notification Center prior to 1.10.0.3291 contained a cross-site request forgery vulnerability. This vulnerability allows remote...

CVE-2025-58468: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability has been reported to affect Notification Center. The remote attackers can then exploit the vulnerability to gain privileges or hijack user identities. We have already fixed the vulnerability in the following version: Notification Center 1.10.0.3291...

CVE-2026-42973 Windows Push Notification Information Disclosure Vulnerability

...

CVE-2026-42973 Windows Push Notification Information Disclosure Vulnerability

...

CVE-2026-42970 Windows Push Notification Information Disclosure Vulnerability

...

CVE-2026-42971 Windows Push Notification Information Disclosure Vulnerability

...

CVE-2026-42970 Windows Push Notification Information Disclosure Vulnerability

...

CVE-2026-42971 Windows Push Notification Information Disclosure Vulnerability

...

CVE-2026-42969 Windows Push Notification Information Disclosure Vulnerability

...

CVE-2026-42969 Windows Push Notification Information Disclosure Vulnerability

...

Windows Push Notification Information Disclosure Vulnerability

Use of uninitialized resource in Windows Push Notifications allows an authorized attacker to disclose information locally...

Windows Push Notification Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally...

Windows Push Notification Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the notification emails. An attacker can inject arbitrary HTML content into emails sent to other users by submitting specially crafted input. Details Cross-site scripting or XSS is a code vulnerability that...

GHSA-6QWM-5FM9-CVJX Apache Answer vulnerable to Cross-site Scripting

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. User-supplied content was included in notification emails without proper escaping, allowing authenticated users to inject arbitrary HTML int...

Apache Answer vulnerable to Cross-site Scripting

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. User-supplied content was included in notification emails without proper escaping, allowing authenticated users to inject arbitrary HTML int...

CVE-2026-34033

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. User-supplied content was included in notification emails without proper escaping, allowing authenticated users to inject arbitrary HTML int...