Lucene search
+L

1818 matches found

Cvelist
Cvelist
added 2025/01/27 9:45 p.m.26 views

CVE-2025-24174

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to bypass Privacy preferences...

0.00261EPSS
SaveExploits0References3
CVE
CVE
added 2025/01/27 9:45 p.m.412 views

CVE-2025-24174

CVE-2025-24174 affects macOS components and is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, and macOS Sonoma 14.7.3. The issue is described as an access control/privacy bypass that could allow an app to bypass Privacy preferences, with the underlying root cause described as improved checks ...

7.7CVSS5.8AI score0.00261EPSS
SaveExploits0References6Affected Software1
CNNVD
CNNVD
added 2025/01/27 12:0 a.m.6 views

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 15.3, which stems from an application that may be able to bypass privacy preferences...

4.4CVSS6.2AI score0.00221EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/01/27 12:0 a.m.22 views

macOS 13.x < 13.7.3 Multiple Vulnerabilities (122070)

The remote host is running a version of macOS / Mac OS X that is 13.x prior to 13.7.3. It is, therefore, affected by multiple vulnerabilities: - An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7.3, macOS Sonoma 14.7.3, visionOS 2.3, iOS...

9.8CVSS7AI score0.01134EPSS
SaveExploits4References39
Oracle linux
Oracle linux
added 2025/01/13 12:0 a.m.22 views

thunderbird security update

128.6.0-3.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 128.6.0 - Add OpenELA debranding 128.6.0-3 - Update to 128.6.0 build3 128.6.0-1 - Update to 128.6.0 build1...

6.5CVSS7.2AI score0.1307EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/01/11 12:0 a.m.12 views

Oracle Linux 8 : firefox (ELSA-2025-0144)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-0144 advisory. 128.6.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.6.0 - Add debranding patches Mustafa Gezen - Add OpenELA default...

7.7CVSS6.8AI score0.1307EPSS
SaveExploits0References8
Oracle linux
Oracle linux
added 2025/01/10 12:0 a.m.37 views

firefox security update

128.6.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.6.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.6.0-1 - Update to 128.6.0 build1...

7.7CVSS7.4AI score0.1307EPSS
SaveExploits0
Oracle linux
Oracle linux
added 2025/01/10 12:0 a.m.18 views

firefox security update

128.6.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 128.6.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.6.0-1 - Update to 128.6.0 build1...

7.7CVSS7.5AI score0.1307EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/01/10 12:0 a.m.13 views

Oracle Linux 9 : firefox (ELSA-2025-0080)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-0080 advisory. 128.6.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red...

7.7CVSS6.8AI score0.1307EPSS
SaveExploits0References8
Oracle linux
Oracle linux
added 2025/01/09 12:0 a.m.29 views

thunderbird security update

128.6.0-3.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 128.6.0 - Add OpenELA debranding 128.6.0-3 - Update to 128.6.0 build3 128.6.0-1 - Update to 128.6.0 build1...

6.5CVSS7.2AI score0.1307EPSS
SaveExploits0
OSV
OSV
added 2024/12/13 7:14 a.m.10 views

BIT-MATTERMOST-2024-28949

Mattermost Server versions 9.5.x before 9.5.2, 9.4.x before 9.4.4, 9.3.x before 9.3.3, 8.1.x before 8.1.11 don't limit the number of user preferences which allows an attacker to send a large number of user preferences potentially causing denial of service...

6.5CVSS5.1AI score0.00562EPSS
SaveExploits0References2
OSV
OSV
added 2024/12/06 9:24 p.m.14 views

GHSA-3HPF-FF72-J67P shared_preferences_android vulnerability

Impact Due to some data types not being natively representable for the available storage options, sharedpreferencesandroid serializes and deserializes special string prefixes to store these unrepresentable data types. This allows arbitrary classes to be deserialized leading to arbitrary code...

3CVSS7.6AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2024/12/06 9:24 p.m.68 views

shared_preferences_android vulnerability

Impact Due to some data types not being natively representable for the available storage options, sharedpreferencesandroid serializes and deserializes special string prefixes to store these unrepresentable data types. This allows arbitrary classes to be deserialized leading to arbitrary code...

7.6AI score
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/12/06 12:0 a.m.5 views

PT-2024-40049 · Unknown · Shared Preferences Android

Name of the Vulnerable Software and Affected Versions: shared preferences android versions prior to 2.3.4 Description: The issue arises from the serialization and deserialization of special string prefixes used to store data types that are not natively representable by the available storage...

3CVSS8AI score
SaveExploits0References4
GitLab Advisory Database
GitLab Advisory Database
added 2024/12/06 12:0 a.m.7 views

shared_preferences_android vulnerability

Due to some data types not being natively representable for the available storage options, sharedpreferencesandroid serializes and deserializes special string prefixes to store these unrepresentable data types. This allows arbitrary classes to be deserialized leading to arbitrary code execution. ...

6.1AI score
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/12/04 12:0 a.m.13 views

Oracle Linux 8 : firefox (ELSA-2024-10752)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-10752 advisory. 128.5.1-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.5.1 - Add debranding patches Mustafa Gezen - Add OpenELA default...

8.8CVSS7.4AI score0.00768EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2024/12/03 12:0 a.m.10 views

Oracle Linux 9 : firefox (ELSA-2024-10702)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-10702 advisory. 128.5.1-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Re...

8.8CVSS7.4AI score0.00768EPSS
SaveExploits0References7
Oracle linux
Oracle linux
added 2024/12/03 12:0 a.m.21 views

firefox security update

128.5.1-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.5.1 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.5.1-1 - Update to 128.5.1 128.5.0-1 - Update to 128.5.0 build1...

8.8CVSS6.8AI score0.00768EPSS
SaveExploits0
Oracle linux
Oracle linux
added 2024/12/03 12:0 a.m.16 views

thunderbird security update

128.5.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 128.5.0 - Add OpenELA debranding 128.5.0-1 - Update to 128.5.0 build1...

8.8CVSS7.2AI score0.00768EPSS
SaveExploits0
NVD
NVD
added 2024/11/15 7:15 p.m.31 views

CVE-2024-45608

GLPI is a free asset and IT management software package. An authenticated user can perfom a SQL injection by changing its preferences. Upgrade to 10.0.17...

8.8CVSS0.00524EPSS
SaveExploits0References1
Rows per page
Query Builder