23905 matches found
ROS-20250924-03
A vulnerability in the Core component of the Oracle VM VirtualBox virtualization software tool is related to the following. insufficient validation of input data. Exploitation of the vulnerability could allow an attacker to gain access to read, modify, add, or delete data or cause a denial of...
The vulnerability of Hikvision Streaming Media Management Server, related to weak password requirements, allows attackers to gain access to confidential data.
The vulnerability of Hikvision Streaming Media Management Server is related to weak password requirements. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data remotely...
The vulnerability of the Machine.cgi?action=get_capability component of the Avtech microprogrammed software for IP cameras and digital/network video recorders allows a intruder to gain unauthorized access to confidential information.
The vulnerability of the Machine.cgi?action=getcapability component of Avtech’s microprogrammed IP cameras and digital/netscreen video recorders lies in the lack of authentication for critical functions. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...
Use After Free
Overview Affected versions of this package are vulnerable to Use After Free via improper handling of caches. An attacker can obtain unauthorized access to sensor information by tricking a user into visiting a malicious website. This is only exploitable if the system is configured with certain...
ROS-20250923-07
The vulnerability of the core server component of the PostgreSQL database management system is related to flaws in the in access control. Exploitation of the vulnerability could allow a remote intruder to bypass ACL security restrictions and gain unauthorized access to protected information. ACL...
CVE-2025-43806: Incorrect Authorization
Batch Engine in Liferay Portal 7.4.0 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.7, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA through update 92 does not properly check permission with import and export tasks, which allows remote authenticated users to access the exported data via...
ROS-20250922-05
The MinIO object storage server vulnerability is related to a client key trust error if the public key matches the sshPublicKey attribute. Exploitation of the vulnerability could allow an attacker acting remotely to bypass authentication and gain unauthorized access to the server. remotely to...
SUSE SLES15: libmariadbd-devel / libmariadbd19 / mariadb / mariadb-bench / etc (SUSE-SU-2025:03275-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03275-1 advisory. Update to version 10.11.14. Security issues fixed: - CVE-2025-30693: InnoDB issue allows high privileged attacker wi...
Security update for mariadb
This update for mariadb fixes the following issues: Update to version 10.6.23. Security issues fixed: CVE-2025-21490: InnoDB issue allows high privileged attacker with network access to cause a hang or frequently repeatable crash of MySQL Server bsc1243356. CVE-2025-30693: InnoDB issue allows hig...
The vulnerability of Autodesk Revit’s BIM software lies in buffer overflows in dynamic memory, which allows attackers to cause system failures, gain unauthorized access to protected information, and execute arbitrary code.
The vulnerability of BIM software from Autodesk Revit is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause system failures, gain unauthorized access to protected information, and execute arbitrary code...
CVE-2025-8894
A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...
Apple macOS Tahoe Permission Issue Vulnerability (CNVD-2025-22393)
Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...
Apple macOS Tahoe environment variable mishandling vulnerability
Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...
Apple macOS Tahoe Symbolic Link Mishandling Vulnerability
Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...
Apple macOS Tahoe sandbox under-limit vulnerability (CNVD-2025-22593)
Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...
Unspecified vulnerability in Apple macOS Tahoe (CNVD-2025-22385)
Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...
CVE-2025-43307
This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Tahoe 26. An app may be able to access sensitive user data...
CVE-2025-43369
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data...
CVE-2025-43305
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. A malicious app may be able to access private information...