CGA-RQV2-H7H6-GMVQ

Bulletin has no description...

CGA-HM8H-5XFR-98HM

Bulletin has no description...

CGA-HG66-XF22-2P94

Bulletin has no description...

CGA-GXGJ-2FQ4-VC32

Bulletin has no description...

CGA-G9MJ-RQPV-9273

Bulletin has no description...

CGA-5GF3-HJCJ-6QQ8

Bulletin has no description...

CGA-3X9F-86MM-5XP6

Bulletin has no description...

MAL-2025-5415 Malicious code in homey-web-app (npm)

The package communicates with a domain associated with malicious activity...

BIT-GITLAB-2024-7586 Insertion of Sensitive Information into Log File in GitLab

An issue was discovered in GitLab EE affecting all versions starting from 17.0 prior to 17.0.6, starting from 17.1 prior to 17.1.4, and starting from 17.2 prior to 17.2.2, where webhook deletion audit log preserved auth credentials...

MINI-JR5F-JR7Q-RHQW

Bulletin has no description...

MINI-F4G8-9M36-H596

Bulletin has no description...

CVE-2025-6424

A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability affects Firefox 140, Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12...

CVE-2025-6430

When a file download is specified via the Content-Disposition header, that directive would be ignored if the file was included via a embed or object tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox 140, Firefox ESR 128.12, Thunderbi...

CGA-PPCG-8388-36P2

Bulletin has no description...

CGA-6H7C-72XP-2WMW

Bulletin has no description...

CGA-CW59-76J6-JX6J

Bulletin has no description...

MINI-P429-4PFR-6C3G

Bulletin has no description...

CVE-2025-47943 Gogs stored XSS in PDF renderer

Gogs is an open source self-hosted Git service. In application version 0.14.0+dev and prior, there is a stored cross-site scripting XSS vulnerability present in Gogs, which allows client-side Javascript code execution. The vulnerability is caused by the usage of a vulnerable and outdated componen...

CVE-2025-6534 xxyopen/201206030 novel-plus File FileController.java remove resource injection

A vulnerability, which was classified as problematic, was found in xxyopen/201206030 novel-plus up to 5.1.3. This affects the function remove of the file novel-admin/src/main/java/com/java2nb/common/controller/FileController.java of the component File Handler. The manipulation leads to improper...

Regular Expression Denial Of Service (ReDoS)

com.powsybl, powsybl-commons is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to inefficient regex handling causing excessive backtracking, which allows an attacker to trigger high CPU usage and potentially crash or slow down the system...