CVE-2025-31281

An input validation issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6. Processing a maliciously crafted file may lead to unexpected app termination...

CVE-2025-43254

CVE-2025-43254 is an out-of-bounds read that was fixed by input validation improvements. Affected: macOS Sequoia 15.6, macOS Ventura 13.7.7, macOS Sonoma 14.7.7. Impact: processing a malicious file may cause an unexpected app termination. This entry is mitigated by the listed OS updates; exploita...

CVE-2025-43184

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. A shortcut may be able to bypass sensitive Shortcuts app settings...

CVE-2025-43184

CVE-2025-43184 affects macOS Shortcuts settings handling. The issue involves bypassing sensitive Shortcuts app settings, which was addressed by adding an additional user-consent prompt. Apple patches are available in macOS Sonoma 14.7.7, macOS Ventura 13.7.7, and macOS Sequoia 15.4. The underlyin...

CVE-2025-43184

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14.7.7, macOS Ventura 13.7.7, macOS Sequoia 15.4. A shortcut may be able to bypass sensitive Shortcuts app settings...

CVE-2025-53541

creationtimestamp| type| source ---|---|--- 2025-07-29 21:36:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv52udehzz2e...

CVE-2025-24119

creationtimestamp| type| source ---|---|--- 2025-07-29 21:33:07+00:00| seen| https://bsky.app/profile/nimblenerd.social/post/3lv52npb5jc2n 2026-04-02 22:17:44+00:00| seen| Telegram/KPFmBxULTPwA3hDhoR9h9PMgAu8sVTpVxH6h4m-4yWjc...

CVE-2025-53902

creationtimestamp| type| source ---|---|--- 2025-07-29 21:31:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv52leq5ch2k...

CVE-2025-31965

creationtimestamp| type| source ---|---|--- 2025-07-29 20:46:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv4y2u7ht52a...

CVE-2016-9840

creationtimestamp| type| source ---|---|--- 2025-07-29 19:15:16+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lv4sx6c6ps2u...

CVE-2025-2179

CVE-2025-2179 affects Palo Alto Networks GlobalProtect App on Linux. A privilege-assignment flaw allows a locally authenticated, non-administrative user to disable the GlobalProtect app, even when configuration would normally prevent it. Other platforms (Windows, macOS, iOS, Android, Chrome OS, G...

CVE-2025-2179 GlobalProtect App: Non Admin User Can Disable the GlobalProtect App

An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on Linux devices enables a locally authenticated non administrative user to disable the app even if the GlobalProtect app configuration would not normally permit them to do so. The GlobalProtect app on...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affects App Connect Professional

Summary There are multiple vulnerabilities in the IBM SDK Java Technology used by App Connect Professional. These issue were disclosed as part of the IBM Java SDK updates in Apr 2025, App Connect Professional has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2025-21587 DESCRIPTIO...

CVE-2025-5587

creationtimestamp| type| source ---|---|--- 2025-07-29 13:29:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv47nl3blu2w...

CVE-2025-54661

creationtimestamp| type| source ---|---|--- 2025-07-29 06:50:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv3je4etqv2j...

CVE-2025-53649

"SwitchBot" App for iOS/Android contains an insertion of sensitive information into log file vulnerability in versions V6.24 through V9.12. If this vulnerability is exploited, sensitive user information may be exposed to an attacker who has access to the application logs...

"SwitchBot" App vulnerable to insertion of sensitive information into log file

Overview "SwitchBot" App provided by SwitchBot contains the following vulnerability. Insertion of sensitive information into log file CWE-532 - CVE-2025-53649 Soh Satoh reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnershi...

CVE-2025-53649

"SwitchBot" App for iOS/Android contains an insertion of sensitive information into log file vulnerability in versions V6.24 through V9.12. If this vulnerability is exploited, sensitive user information may be exposed to an attacker who has access to the application logs...

CVE-2025-53649

"SwitchBot" App for iOS/Android contains an insertion of sensitive information into log file vulnerability in versions V6.24 through V9.12. If this vulnerability is exploited, sensitive user information may be exposed to an attacker who has access to the application logs...

CVE-2025-53649

CVE-2025-53649 – SwitchBot App (Android/iOS) involves an insecure logging flaw where sensitive user information can be written to log files. Affected versions are SwitchBot App V6.24 through V9.12. The root cause is insertion of sensitive information into log files, enabling exposure to anyone wi...