CVE-2026-43801

This issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data...

CVE-2026-43801

An App Store vulnerability in Apple devices allows an application to access sensitive user data . The issue was addressed with improved checks . Affected products include iPhone XS, iPhone XS Max, iPhone XR, and iPad 7th generation . Remediation is available in iOS 18.7.10, iPadOS 18.7.10, iOS 26...

CVE-2026-43801

This issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An app may be able to access sensitive user data...

About the security content of iOS 26.6 and iPadOS 26.6

About the security content of iOS 26.6 and iPadOS 26.6 This document describes the security content of iOS 26.6 and iPadOS 26.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

EUVD-2025-43801

Malicious code in jaja-kue76-miaww npm...

EUVD-2024-43801

Malicious code in bioql PyPI...

com.liferay:com.liferay.ant.bnd (>=2.0.25, <=2.0.39), com.liferay:com.liferay.asset.publisher.web (>=1.1.0, <=1.1.5) +12 more potentially affected by CVE-2025-43801 via com.liferay.portal:com.liferay.portal.impl (2.4.0)

com.liferay.portal:com.liferay.portal.impl MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.ant.bnd =2.0.25, =1.1.0, =2.0.3, =1.0.0, =3.0.0,...

it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-support (1.1.2) potentially affected by CVE-2025-43801 via com.liferay.portal:com.liferay.portal.impl (3.26.4)

com.liferay.portal:com.liferay.portal.impl MAVEN version 3.26.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: -...

com.liferay:com.liferay.message.boards.comment (>=2.0.11, <=2.0.19), com.liferay:com.liferay.message.boards.web (>=1.2.25, <=1.3.0) potentially affected by CVE-2025-43801 via com.liferay.portal:com.liferay.portal.impl (2.19.0)

com.liferay.portal:com.liferay.portal.impl MAVEN version 2.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.message.boards.comment =2.0.11, =1.2.25, =1.3.0...

com.liferay.content-targeting:com.liferay.content.targeting.analytics.api (2.0.1), com.liferay.content-targeting:com.liferay.content.targeting.anonymous.users.api (2.0.1) +300 more potentially affected by CVE-2025-43801 via com.liferay.portal:com.liferay.portal.impl (2.0.0)

com.liferay.portal:com.liferay.portal.impl MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay.content-targeting:com.liferay.content.targeting.analytics.api...

it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-support (1.1.3) potentially affected by CVE-2025-43801 via com.liferay.portal:com.liferay.portal.impl (4.3.0)

com.liferay.portal:com.liferay.portal.impl MAVEN version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - it.dontesta.labs.liferay.portal.db:liferay-portal-database-all-in-one-suppo...

com.liferay.content-targeting:com.liferay.content.targeting.analytics.api (>=2.1.0, <=3.0.0), com.liferay.content-targeting:com.liferay.content.targeting.anonymous.users.api (2.0.2) +2 more potentially affected by CVE-2025-43801 via com.liferay.portal:com.liferay.portal.impl (2.3.0)

com.liferay.portal:com.liferay.portal.impl MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay.content-targeting:com.liferay.content.targeting.analytics.api...

eu.lundegaard.liferay:liferay-db-setup-core (>=3.1.0, <=3.2.0) potentially affected by CVE-2025-43801 via com.liferay.portal:com.liferay.portal.impl (5.13.3)

com.liferay.portal:com.liferay.portal.impl MAVEN version 5.13.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - eu.lundegaard.liferay:liferay-db-setup-core =3.1.0, =3.2.0 Source cves:...

com.liferay:com.liferay.exportimport.service (>=3.7.0, <=4.0.8) potentially affected by CVE-2025-43801 via com.liferay.portal:com.liferay.portal.impl (2.16.0)

com.liferay.portal:com.liferay.portal.impl MAVEN version 2.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.exportimport.service =3.7.0, =4.0.8 Source cves:...

com.liferay:com.liferay.asset.publisher.web (>=1.2.0, <=1.8.11), com.liferay:com.liferay.blogs.web (>=1.0.12, <=2.0.4) +8 more potentially affected by CVE-2025-43801 via com.liferay.portal:com.liferay.portal.impl (2.6.0)

com.liferay.portal:com.liferay.portal.impl MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay.portal:com.liferay.portal.impl and may be impacted: - com.liferay:com.liferay.asset.publisher.web =1.2.0, =1.0.12, =1.0.14,...

CVE-2025-43801

Unchecked input for loop condition vulnerability in XML-RPC in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers...

CVE-2024-43801

creationtimestamp| type| source ---|---|--- 2024-09-02 21:24:25+00:00| seen| https://t.me/cvedetector/4651...

CVE-2024-43801 vulnerabilities

Vulnerabilities for packages: jellyfin...

CVE-2024-43801 vulnerabilities

Vulnerabilities for packages: jellyfin...

CVE-2024-43801 Privilege escalation to admin from a low-privileged user via SVG upload in Jellyfin

Jellyfin is an open source self hosted media server. The Jellyfin user profile image upload accepts SVG files, allowing for a stored XSS attack against an admin user via a specially crafted malicious SVG file. When viewed by an admin outside of the Jellyfin Web UI e.g. via "view image" in a...