CVE-2025-6424

A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability affects Firefox 140, Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12...

CGA-PPCG-8388-36P2

Bulletin has no description...

CGA-6H7C-72XP-2WMW

Bulletin has no description...

CGA-CW59-76J6-JX6J

Bulletin has no description...

MINI-P429-4PFR-6C3G

Bulletin has no description...

CVE-2025-47943 Gogs stored XSS in PDF renderer

Gogs is an open source self-hosted Git service. In application version 0.14.0+dev and prior, there is a stored cross-site scripting XSS vulnerability present in Gogs, which allows client-side Javascript code execution. The vulnerability is caused by the usage of a vulnerable and outdated componen...

CVE-2025-6534 xxyopen/201206030 novel-plus File FileController.java remove resource injection

A vulnerability, which was classified as problematic, was found in xxyopen/201206030 novel-plus up to 5.1.3. This affects the function remove of the file novel-admin/src/main/java/com/java2nb/common/controller/FileController.java of the component File Handler. The manipulation leads to improper...

Regular Expression Denial Of Service (ReDoS)

com.powsybl, powsybl-commons is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to inefficient regex handling causing excessive backtracking, which allows an attacker to trigger high CPU usage and potentially crash or slow down the system...

Deserialization Of Untrusted Data

com.powsybl, powsybl-math is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to improper handling of serialized data in the SparseMatrix.read method, which allows malicious input to be deserialized in an unsafe manner...

Fuji Electric Smart Editor Buffer Overflow Vulnerability

Fuji Electric Smart Editor is an editing software mainly used to configure and program HMI Human Machine Interface devices. A buffer overflow vulnerability exists in Fuji Electric Smart Editor, which is caused by an out-of-bounds write and can be exploited by an attacker to execute arbitrary code...

Ubuntu: Security Advisory (USN-7591-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-47688

In WhiteBeam 0.2.0 through 0.2.1 before 0.2.2, a user with local access to a server can bypass the allow-list functionality because a file can be truncated in the OpenFileDescriptor action before the VerifyCanWrite action is performed...

CVE-2025-49144 Notepad++ Privilege Escalation in Installer via Uncontrolled Executable Search Path

Notepad++ is a free and open-source source code editor. In versions 8.8.1 and prior, a privilege escalation vulnerability exists in the Notepad++ v8.8.1 installer that allows unprivileged users to gain SYSTEM-level privileges through insecure executable search paths. An attacker could use social...

MAL-2025-5232 Malicious code in nf-cl-logger-logger-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b104f3015e44fa4a28987e5ce9d85268531ad6cee0a7b2d366c75a78279ccdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RHSA-2025:9332 Red Hat Security Advisory: mpfr security update

Bulletin has no description...

RHSA-2025:9322 Red Hat Security Advisory: libblockdev security update

Bulletin has no description...

CVE-2025-49964

Cross-Site Request Forgery CSRF vulnerability in indgeek ClipLink cliplink allows Cross Site Request Forgery.This issue affects ClipLink: from n/a through = 1.1...

MINI-9VRX-RRCG-33QP

Bulletin has no description...

ALSA-2025:9330 Important: perl-YAML-LibYAML security update

Kirill Siminov's "libyaml" is arguably the best YAML implementation. The C library is written precisely to the YAML 1.1 specification. It was originally bound to Python and was later bound to Ruby. Security Fixes: yaml-libyaml: LibYAML Perl File Modification Vulnerability CVE-2025-40908 For more...

MAL-2025-5455 Malicious code in red-bull-venue-tools (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5fe5829b1fbc9d863be9bad876998565a13ebc95fecc9ccc5600f92ecd423b package.json declares preinstall=node index.js, which fires automatically ...