9695 matches found
CVE-2025-4632
Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write arbitrary file as system authority...
CVE-2025-22249
creationtimestamp| type| source ---|---|--- 2025-05-13 05:30:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16079 2025-05-13 06:47:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lozvazt5h322 2025-05-13 09:41:15+00:00| seen| https://t.me/cvedetector/25167 2025-05-13...
CVE-2025-42997
creationtimestamp| type| source ---|---|--- 2025-05-13 03:12:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lozjabveta2n 2025-05-13 05:30:20+00:00| seen| https://t.me/cvedetector/25148...
CVE-2025-43002
SAP S4CORE OData meta-data property allows an authenticated attacker to access restricted information due to missing authorization check. This could cause a low impact on confidentiality but integrity and availability of the application are not impacted...
CVE-2025-31329 Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform
SAP NetWeaver is vulnerable to an Information Disclosure vulnerability caused by the injection of malicious instructions into user configuration settings. An attacker with administrative privileges can craft these instructions so that when accessed by the victim, sensitive information such as use...
CVE-2025-24495
Incorrect initialization of resource in the branch prediction unit for some IntelR Core™ Ultra Processors may allow an authenticated user to potentially enable information disclosure via local access...
ROS-2-484
2.484 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability could...
CVE-2025-20012
Incorrect behavior order for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access...
CVE-2025-31236
creationtimestamp| type| source ---|---|--- 2025-05-12 22:29:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16067 2025-05-12 22:47:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loz2g2nuaj2e 2025-05-13 01:19:27+00:00| seen| https://t.me/cvedetector/25129...
CVE-2025-31196
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing a maliciously crafted file may lead to a...
CVE-2025-24223
The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.5, tvOS 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, Safari 18.5. Processing maliciously crafted web content may lead to memory corruption...
CVE-2025-31256
The issue was addressed with improved handling of caches. This issue is fixed in macOS Sequoia 15.5. Hot corner may unexpectedly reveal a user’s deleted notes...
CVE-2025-30440
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. An app may be able to bypass ASLR...
CVE-2025-31209
An out-of-bounds read vulnerability exists in Apple's PDF parsing mechanism due to a lack of proper validation of user-supplied data. This flaw can lead to the disclosure of sensitive user information and, when chained with other vulnerabilities, may allow for arbitrary code execution in the cont...
CVE-2025-31258
A security vulnerability exists in macOS where an application may be able to break out of its sandbox . This issue was addressed by removing the vulnerable code and is fixed in macOS Sequoia 15.5 . While the specific component causing the breakout is not detailed in the provided documents, resear...
CVE-2025-47712
No description is available for this CVE...
CVE-2025-47711
No description is available for this CVE...
CVE-2025-46747
An authenticated user without user-management permissions could identify other user accounts...
CVE-2025-4560
The ISOinsight from Netvision has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access certain system functions. These functions include viewing the administrator list, viewing and editing IP settings, and uploading files...