2109 matches found
CVE-2025-43399
CVE-2025-43399 affects Apple platforms (iOS 18.7.2, iPadOS 18.7.2, macOS Sequoia 15.7.2, macOS Tahoe 26.1). The issue stems from improved redaction of sensitive information, with the fix shipped in the listed updates. Impact per provided sources: an app may be able to access protected user data. ...
CVE-2025-43395
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access protected user data...
PT-2025-44841
Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 Description An application may be capable of accessing user data that should be protected. The issue involves improper handling of symlinks. Recommendations Update to...
PT-2025-44840
Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 Description An application may be able to access protected user data due to improved handling of symlinks. Recommendations Update to macOS Sonoma version 14.8.2 or...
PT-2025-50993
Name of the Vulnerable Software and Affected Versions macOS versions prior to 26.1 Description An application may be able to access protected user data due to insufficient validation of symlinks. Recommendations Update to macOS version 26.1 or later...
ROS-20251022-01
Authentication and authorization module for Apache 2.x HTTP server Modauthopenidc vulnerability is related to an information disclosure. Exploitation of the vulnerability allows an attacker acting remotely to disclose protected information...
The vulnerability of the Tab component in Microsoft Edge and Google Chrome browsers allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Tab component in Microsoft Edge and Google Chrome relates to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the MapUrlToZone method in Windows operating systems allows attackers to disclose sensitive information that is protected by security measures.
The vulnerability of the MapUrlToZone method in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
The vulnerability of the xfrmi_xmit() function in the net/xfrm/xfrm_interface_core.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the xfrmixmit function in the net/xfrm/xfrminterfacecore.c module, which implements network functions in the Linux kernel, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of Websoft HCM’s automation software for HR processes allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of Websoft HCM’s automation software for HR processes is related to the disclosure of information in debugging messages. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the REST API component of the Cisco Nexus Dashboard Fabric Controller (NDFC) platform allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the REST API component of the Cisco Nexus Dashboard Fabric Controller NDFC management platform relates to a flaw in the data protection mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the universal monitoring system Zabbix, related to authentication errors, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the Zabbix universal monitoring system is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
EUVD-2020-1875
Malware in sbrugna...
EUVD-2018-16918
Malware in sbrugna...
EUVD-2019-11761
Malware in sbrugna...
The vulnerability of the Zimbra Collaboration Suite’s email management system, related to the lack of measures taken to protect the website structure, allows attackers to execute cross-site scripting attacks (XSS) and gain access to protected information.
The vulnerability of the Zimbra Collaboration Suite email management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely and gain access to protected informati...
EUVD-2024-34942
Malicious code in bioql PyPI...
EUVD-2025-29304
Malicious code in bioql PyPI...