1052 matches found
CVE-2025-24281
CVE-2025-24281 affects macOS Sequoia 15.4. The issue enabled an app to access sensitive user data and was addressed by improved data protection/redaction. Apple’s advisory for macOS Sequoia 15.4 lists CVE-2025-24281 under the Security Content, describing an impact on user data exposure and noting...
CVE-2025-24212
This issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to break out of its sandbox...
CVE-2025-2953
A flaw was found in PyTorch. This vulnerability allows denial of service via local exploitation. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability t...
BELL-CVE-2023-53001
Bulletin has no description...
CVE-2024-13939
A flaw was found in String::Compare::ConstantTime for Perl through 0.321, which is vulnerable to timing attacks. This vulnerability allows an attacker to guess the length of a secret string. As stated in the documentation: "If the lengths of the strings are different because equals returns false...
CVE-2025-21876
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix suspicious RCU usage Commit "iommu/vt-d: Allocate DMAR fault interrupts locally" moved the call to enabledrhdfaulthandling to a code path that does not hold any lock while traversing the drhd list. Fix it by...
BELL-CVE-2023-53018
Bulletin has no description...
BELL-CVE-2023-52993
Bulletin has no description...
CVE-2023-53026
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix ib block iterator counter overflow When registering a new DMA MR after selecting the best aligned page size for it, we iterate over the given sglist to split each entry to smaller, aligned to the selected page size...
CVE-2023-53028
In the Linux kernel, the following vulnerability has been resolved: Revert "wifi: mac80211: fix memory leak in ieee80211ifadd" This reverts commit 13e5afd3d773c6fc6ca2b89027befaaaa1ea7293. ieee80211iffree is already called from freenetdevndev because ndev-privdestructor == ieee80211iffree syzbot...
CVE-2025-25374
creationtimestamp| type| source ---|---|--- 2025-03-25 20:24:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8754 2025-03-25 23:40:38+00:00| seen| https://t.me/cvedetector/21124 2025-03-26 01:04:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llalpaxjf...
CVE-2025-1974
A flaw was found in Kubernetes where, under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This issue can lead to the disclosure of Secrets accessible to the controller. Note that...
CVE-2025-2765
creationtimestamp| type| source ---|---|--- 2025-03-25 04:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-177/ 2025-04-23 20:32:35+00:00| seen| Telegram/Eg-knjjPTR9ocTVizjx2pI3zFSlAWu4SgE31pSS6iQco10 2025-04-23 21:10:30+00:00| seen| https://t.me/cvedetector/23609...
CVE-2025-30208
Vite, a provider of frontend development tooling, has a vulnerability in versions prior to 6.2.3, 6.1.2, 6.0.12, 5.4.15, and 4.5.10. @fs denies access to files outside of Vite serving allow list. Adding ?raw?? or ?import?? to the URL bypasses this limitation and returns the file content if it...
CVE-2025-1974 ingress-nginx admission controller RCE escalation
A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. Note...
CVE-2024-11302
A missing checkaccess function in the lollmsbindinginfos module of the parisneo/lollms repository, version V14, allows attackers to add, modify, and remove bindings arbitrarily. This vulnerability affects the /installbinding and /reinstallbinding endpoints, among others, enabling unauthorized...
CVE-2024-7776
A vulnerability in the downloadmodel function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability can be exploited by an attacker to overwrite files i...
CVE-2024-7045
CVE-2024-7045 is rejected/not used; this CVE ID does not represent an active vulnerability entry.
CVE-2025-27775
creationtimestamp| type| source ---|---|--- 2025-03-19 23:00:28+00:00| seen| https://t.me/cvedetector/20677 2025-03-20 00:49:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkri2jvaw42m 2025-03-20 19:18:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8...