9429 matches found
CVE-2025-43244
A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to cause unexpected system termination...
CVE-2025-43215
CVE-2025-43215 affects macOS Sequoia; the issue involves processing of malicious images that could disclose process memory. It is fixed in macOS Sequoia 15.6 via improved checks. Practical impact is memory disclosure when handling crafted images. Remediation: update to macOS Sequoia 15.6 or later...
CVE-2025-43220
This issue was addressed with improved validation of symlinks. This issue is fixed in iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access protected user data...
CVE-2025-43235
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6. An app may be able to cause a denial-of-service...
CVE-2025-53541
creationtimestamp| type| source ---|---|--- 2025-07-29 21:36:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv52udehzz2e...
CVE-2025-53102 Discourse's WebAuthn challenge isn't cleared from user session after authentication
Discourse is an open-source community discussion platform. Prior to version 3.4.7 on the stable branch and version 3.5.0.beta.8 on the tests-passed branch, upon issuing a physical security key for 2FA, the server generates a WebAuthn challenge, which the client signs. The challenge is not cleared...
CVE-2025-50738
creationtimestamp| type| source ---|---|--- 2025-07-29 17:12:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv4m3ubwc52z...
CVE-2025-6505
creationtimestamp| type| source ---|---|--- 2025-07-29 17:07:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv4lsvt4fy2e...
CVE-2025-6504
creationtimestamp| type| source ---|---|--- 2025-07-29 17:06:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv4lr46e6n2z...
CVE-2025-54661
creationtimestamp| type| source ---|---|--- 2025-07-29 06:50:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv3je4etqv2j...
CVE-2025-54663
creationtimestamp| type| source ---|---|--- 2025-07-29 06:39:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv3ipqjk3k2w...
CVE-2025-53079
Absolute Path Traversal in Samsung DMSData Management Server allows authenticated attacker Administrator to read sensitive files...
CVE-2025-54381
creationtimestamp| type| source ---|---|--- 2025-07-29 03:36:49+00:00| published-proof-of-concept| https://github.com/bentoml/BentoML/security/advisories/GHSA-mrmq-3q62-6cc8 2025-07-30 03:00:05+00:00| published-proof-of-concept| Telegram/ymfDcJJei73TCRKQzCboKGwK4pwFpRPmdZcBrNWP81VMIJA 2025-07-30...
CVE-2025-43255
creationtimestamp| type| source ---|---|--- 2025-07-29 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-674/...
CVE-2025-8321
creationtimestamp| type| source ---|---|--- 2025-07-29 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-712/ 2025-07-30 03:37:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv5oypy4xl2q...
CVE-2025-8264
Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend. An attacker can inject malicious commands by manipulating the username field in basic authentication. This allows the attacker to access and potentially modif...
PT-2025-31179 · Apache · Apache Http Server
Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The vulnerability is a cross-site scripting XSS issue. The reason for rejection is stated as 'Not used'. Recommendations: At the moment, there is no information about a newer...
TSplus Remote Access Admin Tool 安全漏洞
The TSplus Remote Access Admin Tool is a tool for centralized configuration and administration of the TSplus Remote Access Server from TSplus France. A security vulnerability exists in versions prior to TSplus Remote Access Admin Tool v18.40.6.17, which stems from an unsalted PIN hash stored in t...
About the security content of iPadOS 17.7.9
About the security content of iPadOS 17.7.9 This document describes the security content of iPadOS 17.7.9. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...