13092 matches found
MINI-F4G8-9M36-H596
Bulletin has no description...
CVE-2025-6430
When a file download is specified via the Content-Disposition header, that directive would be ignored if the file was included via a embed or object tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability affects Firefox 140, Firefox ESR 128.12, Thunderbi...
CVE-2025-6424
A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability affects Firefox 140, Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12...
CGA-PPCG-8388-36P2
Bulletin has no description...
CGA-6H7C-72XP-2WMW
Bulletin has no description...
CGA-CW59-76J6-JX6J
Bulletin has no description...
MINI-P429-4PFR-6C3G
Bulletin has no description...
CVE-2025-47943 Gogs stored XSS in PDF renderer
Gogs is an open source self-hosted Git service. In application version 0.14.0+dev and prior, there is a stored cross-site scripting XSS vulnerability present in Gogs, which allows client-side Javascript code execution. The vulnerability is caused by the usage of a vulnerable and outdated componen...
CVE-2025-6534 xxyopen/201206030 novel-plus File FileController.java remove resource injection
A vulnerability, which was classified as problematic, was found in xxyopen/201206030 novel-plus up to 5.1.3. This affects the function remove of the file novel-admin/src/main/java/com/java2nb/common/controller/FileController.java of the component File Handler. The manipulation leads to improper...
Regular Expression Denial Of Service (ReDoS)
com.powsybl, powsybl-commons is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to inefficient regex handling causing excessive backtracking, which allows an attacker to trigger high CPU usage and potentially crash or slow down the system...
Deserialization Of Untrusted Data
com.powsybl, powsybl-math is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to improper handling of serialized data in the SparseMatrix.read method, which allows malicious input to be deserialized in an unsafe manner...
Fuji Electric Smart Editor Buffer Overflow Vulnerability
Fuji Electric Smart Editor is an editing software mainly used to configure and program HMI Human Machine Interface devices. A buffer overflow vulnerability exists in Fuji Electric Smart Editor, which is caused by an out-of-bounds write and can be exploited by an attacker to execute arbitrary code...
Ubuntu: Security Advisory (USN-7591-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-47688
In WhiteBeam 0.2.0 through 0.2.1 before 0.2.2, a user with local access to a server can bypass the allow-list functionality because a file can be truncated in the OpenFileDescriptor action before the VerifyCanWrite action is performed...
CVE-2025-49144 Notepad++ Privilege Escalation in Installer via Uncontrolled Executable Search Path
Notepad++ is a free and open-source source code editor. In versions 8.8.1 and prior, a privilege escalation vulnerability exists in the Notepad++ v8.8.1 installer that allows unprivileged users to gain SYSTEM-level privileges through insecure executable search paths. An attacker could use social...
MAL-2025-5232 Malicious code in nf-cl-logger-logger-logger (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b104f3015e44fa4a28987e5ce9d85268531ad6cee0a7b2d366c75a78279ccdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
RHSA-2025:9332 Red Hat Security Advisory: mpfr security update
Bulletin has no description...
RHSA-2025:9322 Red Hat Security Advisory: libblockdev security update
Bulletin has no description...
