31891 matches found
CVE-2025-0141 GlobalProtect App: Privilege Escalation (PE) Vulnerability
An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on enables a locally authenticated non administrative user to escalate their privileges to root on macOS and Linux or NT AUTHORITY\SYSTEM on Windows. The GlobalProtect app on iOS, Android, Chrome OS and...
CVE-2025-0141 GlobalProtect App: Privilege Escalation (PE) Vulnerability
An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on enables a locally authenticated non administrative user to escalate their privileges to root on macOS and Linux or NT AUTHORITY\SYSTEM on Windows. The GlobalProtect app on iOS, Android, Chrome OS and...
CVE-2025-0141
An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on enables a locally authenticated non administrative user to escalate their privileges to root on macOS and Linux or NT AUTHORITY\SYSTEM on Windows. The GlobalProtect app on iOS, Android, Chrome OS and...
CVE-2025-0141
CVE-2025-0141 corresponds to an incorrect privilege assignment in Palo Alto Networks GlobalProtect App. The vulnerability allows a locally authenticated, non-administrative user to escalate to root on macOS/Linux or to NT AUTHORITY\SYSTEM on Windows. Affected platforms exclude GlobalProtect on iO...
CVE-2025-0140 GlobalProtect App: Non Admin User Can Disable the GlobalProtect App
An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable the app even if the GlobalProtect app configuration would not normally permit them to do so. The GlobalProtect app on...
CVE-2025-0140 GlobalProtect App: Non Admin User Can Disable the GlobalProtect App
An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable the app even if the GlobalProtect app configuration would not normally permit them to do so. The GlobalProtect app on...
CVE-2025-0140
CVE-2025-0140 describes an incorrect privilege assignment in the Palo Alto Networks GlobalProtect App (macOS) that can allow a locally authenticated non-administrative user to disable the app. The primary description states Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP are not aff...
CVE-2025-53664
creationtimestamp| type| source ---|---|--- 2025-07-09 18:19:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltkgiqpafd2t...
CVE-2025-53672
creationtimestamp| type| source ---|---|--- 2025-07-09 18:11:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltkg3ndlta27...
Security update for tomcat10
This update for tomcat10 fixes the following issues: Fixed refactor CGI servlet to access resources via WebResources bsc1243815. Fixed limits the total number of parts in a multi-part request and limits the size of the headers provided with each part bsc1244656. Fixed expand checks for webAppMoun...
Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service and improper input validation [CVE-2025-3262] [CVE-2025-3263] [CVE-2025-3264] [CVE-2025-3777]
Summary Python module transformers is used by IBM App Connect Enterprise Certified Container by the mapping assistance capability. IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service and improper input validatio...
CVE-2025-38258
creationtimestamp| type| source ---|---|--- 2025-07-09 14:56:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltk36f3nzn2x...
CVE-2025-38255
creationtimestamp| type| source ---|---|--- 2025-07-09 14:41:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltk2djs64v2l...
CVE-2025-38249
creationtimestamp| type| source ---|---|--- 2025-07-09 14:17:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltjyyhaenx2e...
CVE-2025-38251
creationtimestamp| type| source ---|---|--- 2025-07-09 14:10:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltjyldumtx2t...
CVE-2025-7218
creationtimestamp| type| source ---|---|--- 2025-07-09 09:35:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltjj7a4isc2y...
CVE-2025-7220
creationtimestamp| type| source ---|---|--- 2025-07-09 06:53:19+00:00| seen| https://bsky.app/profile/potato.software/post/3ltja64zxce2j 2025-07-09 09:45:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltjjr4w3nx2s...
CVE-2025-53687
creationtimestamp| type| source ---|---|--- 2025-07-09 05:55:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltj4w3nvzg2y...
BIT-APPSMITH-2024-55965
An issue was discovered in Appsmith before 1.51. Users invited as "App Viewer" incorrectly have access to development information of a workspace specifically, a list of datasources in a workspace they're a member of. This information disclosure does not expose sensitive data in the datasources,...