29 matches found
EUVD-2018-9601
Malware in sbrugna...
EUVD-2018-9599
Malware in sbrugna...
Remote Code Execution (RCE)
smolagents is vulnerable Remote Code Execution RCE. The vulnerability is due to inadequate enforcement of static and dynamic checks in localpythonexecutor.py, allowing attackers to exploit whitelisted modules and functions...
PT-2025-13904
Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.7.5 iPadOS versions prior to 17.7.6 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description A malicious app may be able to access private information due to inadequate checks. The...
PT-2025-13948
Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.7.5 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description The issue allows an app to potentially modify protected parts of the file system due to inadequate checks. Recommendations Fo...
CVE-2025-22213
Inadequate checks in the Media Manager allowed users with "edit" privileges to change file extension to arbitrary extension, including .php and other potentially executable extensions...
CVE-2025-22213 [20250301] - Core - Malicious file uploads via Media Manager
Inadequate checks in the Media Manager allowed users with "edit" privileges to change file extension to arbitrary extension, including .php and other potentially executable extensions...
PT-2025-11546
Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.2 Description The issue allows an app to potentially access sensitive user data due to inadequate checks. This has been addressed with improved checks. Recommendations For versions prior to 15.2, update to macOS...
PT-2024-31074
Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.7.1 macOS versions prior to 14.7.1 Description A malicious application may be able to modify protected parts of the file system due to inadequate checks. Recommendations For macOS versions prior to 13.7.1, update to...
PT-2024-31056 · Apple · Xcode +1
Name of the Vulnerable Software and Affected Versions: Xcode versions prior to 16 Description: The issue allows an app to potentially inherit Xcode permissions, enabling access to user data due to inadequate permissions checking. Recommendations: For versions prior to 16, update to Xcode 16 to...
SAP Student Life Cycle Management 安全漏洞
SAP Student Life Cycle Management is a student life cycle management system from SAP. An authorization issue vulnerability exists in SAP Student Life Cycle Management that stems from a failure to perform proper authorization checks on authenticated users, which could be exploited by an attacker t...
PT-2022-21481 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.5 Description: The issue allows an app to potentially gain root privileges due to inadequate checks. The estimated number of potentially affected devices is not specified. There is no information about real-world...
PT-2021-18824
Name of the Vulnerable Software and Affected Versions macOS versions prior to 11.4 Description A non-privileged user may be able to modify restricted settings due to inadequate checks. This issue has been addressed with improved checks. Recommendations For versions prior to 11.4, update to macOS...
Design/Logic Flaw
In RELIC before 2020-08-01, RSA PKCS1 v1.5 signature forgery can occur because certain checks of the padding and of the first two bytes are inadequate. NOTE: this requires that a low public exponent such as 3 is being used. The product, by default, does not generate RSA keys with such a low numbe...
Authorization
Veritas APTARE versions prior to 10.4 did not perform adequate authorization checks. An authenticated user could gain unauthorized access to sensitive information or functionality by manipulating specific parameters within the application...
CVE-2019-15028
In Joomla! before 3.9.11, inadequate checks in comcontact could allow mail submission in disabled forms...
[20190801] - Core - Hardening com_contact contact form
Inadequate checks in comcontact could allowed mail submission in disabled forms...
[20190204] - Core - Stored XSS issue in the Global Configuration help url #2
Inadequate checks at the Global Configuration helpurl settings allowed a stored XSS...