62 matches found
CVE-2023-42345
A Cross Site Scripting vulnerability in Alkacon OpenCms before 16 exists via updateModelGroups.jsp...
Unity Linux 20.1060e / 20.1070e Security Update: nodejs (UTSA-2026-017544)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017544 advisory. Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change...
Alkacon OpenCms is vulnerable to XXE when the <!DOCTYPE> refers to an external host
Alkacon OpenCms before 16 allows XXE when the refers to an external host...
BIT-JRE-2023-41993
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7...
CVE-2023-42346
Alkacon OpenCms before 16 allows XXE when the refers to an external host...
CVE-2023-42345
A Cross Site Scripting vulnerability in Alkacon OpenCms before 16 exists via updateModelGroups.jsp...
Adobe Bridge 15.1.3 < 15.1.4 / 16.x < 16.0.2 Multiple Vulnerabilities (APSB26-21)
The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 15.1.4 or 16.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-21 advisory. - Integer Overflow or Wraparound CWE-190 potentially leading to Arbitrary code execution...
EUVD-2025-24809
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2022-2060
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site Scripting XSS - Stored in GitHub repository dolibarr/dolibarr prior to 16.0. CVE-2022-2060 Note that Nessus relies on the presence of the package as...
Linux Distros Unpatched Vulnerability : CVE-2022-0731
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Access Control IDOR in GitHub repository dolibarr/dolibarr prior to 16.0. CVE-2022-0731 Note that Nessus relies on the presence of the package as...
CVE-2025-21041
Insecure Storage of Sensitive Information in Secure Folder prior to Android 16 allows local attackers to access sensitive information...
AZL-64404 CVE-2025-52939 affecting package ceph for versions less than 16.2.10-8
Out-of-bounds Write vulnerability in dail8859 NotepadNext src/lua/src modules. This vulnerability is associated with program files ldebug.C, lvm.C. This issue affects NotepadNext: through v0.11...
UBUNTU-CVE-2025-4207
Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and also libpq. Versions before PostgreSQL 17.5, 16.9, 15.13,...
PT-2025-13909 · Apple · Xcode +1
Name of the Vulnerable Software and Affected Versions: Xcode versions prior to 16.3 Description: A malicious app may be able to access private information due to an issue that has been addressed with improved checks. Recommendations: For versions prior to 16.3, update to Xcode 16.3 to resolve the...
Netflix e2nest 安全漏洞
Netflix e2nest is a web-based platform from the American company Netflix, Inc. for media-centric video, audio and image subjective testing. A security vulnerability exists in versions prior to Netflix e2nest 16, which stems from a vulnerability that allows an unauthenticated user to perform path...
PT-2024-29118 · Apple · Xcode +1
Name of the Vulnerable Software and Affected Versions: Xcode versions prior to 16 Description: A privacy issue was addressed by removing sensitive data. An attacker may be able to determine the Apple ID of the owner of the computer. Recommendations: For versions prior to 16, update to Xcode 16 to...
PT-2024-30997 · Apple · Xcode +1
Name of the Vulnerable Software and Affected Versions: Xcode versions prior to 16 Description: A malicious application may gain access to a user's Keychain items. This issue was addressed by enabling hardened runtime. Recommendations: For versions prior to 16, update to Xcode 16 to resolve the...
SUSE CVE-2023-41993
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7...
Apple Safari 安全漏洞
Apple Safari is a web browser from Apple Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. A security vulnerability exists in Apple Safari versions prior to 16.6. An attacker can exploit the vulnerability to execute arbitrary code...