6.9
CVE-2021-25262 - Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph…
Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack.
8.3
CVE-2021-25255 - Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial o…
Yandex Browser Lite for Android prior to version 21.1.0 allows remote attackers to cause a denial of service.
0.0
CVE-2025-5026 -
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
8.2
CVE-2021-25254 - Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.
Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.
6.8
CVE-2025-4949 - XXE vulnerability in Eclipse JGit
In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the AmazonS3 class used to implement the experimental amazons3 git transport protocol allowing to store git pack files in an Amazon S3 bucket, are vulnerable to XML External Entity (XXE) a…
9.8
CVE-2025-4524 - Madara – Responsive and modern WordPress theme for manga sites <= 2.2.2 - Unauthenticated Local Fil…
The Madara – Responsive and modern WordPress theme for manga sites theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.2.2 via the 'template' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the s…
7.4
CVE-2025-5024 - Gnome-remote-desktop: uncontrolled resource consumption due to malformed rdp pdus
A flaw was found in gnome-remote-desktop. Once gnome-remote-desktop listens for RDP connections, an unauthenticated attacker can exhaust system resources and repeatedly crash the process. There may be a resource leak after many attacks, which will also result in gnome-remote-desktop no longer being…
9.8
CVE-2025-4094 - Digits < 8.4.6.1 - Auth Bypass via OTP Bruteforcing
The DIGITS: WordPress Mobile Number Signup and Login WordPress plugin before 8.4.6.1 does not rate limit OTP validation attempts, making it straightforward for attackers to bruteforce them.
5.3
CVE-2025-5013 - HkCms Search index.html cross site scripting
A vulnerability, which was classified as problematic, was found in HkCms up to 2.3.2.240702. This affects an unknown part of the file /index.php/search/index.html of the component Search. The manipulation of the argument keyword leads to cross site scripting. It is possible to initiate the attack r…
4.8
CVE-2025-5011 - moonlightL hexo-boot Dynamic List Page index.html cross site scripting
A vulnerability classified as problematic was found in moonlightL hexo-boot 4.3.0. This vulnerability affects unknown code of the file /admin/home/index.html of the component Dynamic List Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has bee…