300220 matches found
ROS-20260914-73-0002
The vulnerability in github.com/moby/sys/user version up to 0.4.1 relates to uncontrolled resource consumption during analysis of specially created user or group databases. This allows attackers to cause excessive memory consumption, potentially leading to process termination due to out-of-memory...
PT-2026-108050
Name of the Vulnerable Software and Affected Versions github.com/moby/sys/user versions prior to 0.4.1 Description The github.com/moby/sys/user package, which provides Go utilities for parsing and looking up entries in Unix-style user and group database files, does not sufficiently limit entries...
PT-2026-91653
Name of the Vulnerable Software and Affected Versions iOS versions prior to 27 iPadOS versions prior to 27 macOS Golden Gate versions prior to 27 visionOS versions prior to 27 Description A privacy issue exists where an application may be able to identify a user across reinstalls due to improper...
CVE-2026-43762: Improper Access Control
The issue was addressed with improved checks. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS 26.6. An app may be able to access user-sensitive data...
PT-2026-91135
Incorrect Authorization vulnerability in Apache Doris allows an authenticated user to bypass privilege checks and access or modify data they are not authorized to. This issue affects Apache Doris: from 3.1.0 through 3.1., from 4.0.0 through 4.0.7, and from 4.1.0 through 4.1.3. Users are recommend...
CVE-2023-50459
An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. It fails to check access permissions for the edit user component. An authenticated frontend user can exploit this to either edit data of various frontend users or delete various frontend user accounts...
PT-2026-91722
Name of the Vulnerable Software and Affected Versions IBM i Access Family versions 1.1.2.0 through 1.1.9.15 Description IBM i Access Client Solutions contains an issue where improper validation of user-supplied input in a malicious emulator macro RunProgram action could allow an authenticated use...
CVE-2023-37253
An issue was discovered in the ProofreadPage extension for MediaWiki through 1.39.3. It leaks information about a suppressed user via the API and config variables...
CVE-2023-50461
An issue was discovered in the directmail aka Direct Mail extension through 9.5.1 for TYPO3. The Configuration backend module of the extension allows an authenticated user to write to an arbitrary TSConfig page for folders configured as Direct Mail. Exploiting this may lead to Configuration...
PT-2026-91495
Name of the Vulnerable Software and Affected Versions macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 Description A logic issue involving state management may allow an application to access protected user data. Recommendations Update...
Important: libvirt
Issue Overview: A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can...
PT-2026-91528
Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.7 iPadOS versions prior to 26.7 iOS versions prior to 27 iPadOS versions prior to 27 macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 tvOS versions prior to...
PT-2026-91697
Name of the Vulnerable Software and Affected Versions Safari versions prior to 27 iOS versions prior to 26.7 iPadOS versions prior to 26.7 macOS Golden Gate versions prior to 27 visionOS versions prior to 27 Description An app may be able to access sensitive user data due to insufficient...
PT-2026-91721
Name of the Vulnerable Software and Affected Versions IBM i Access Family versions 1.1.2.0 through 1.1.9.15 Description IBM i Access Client Solutions contains an issue where improper validation of user-supplied input in the STRPCCMD CL command allows an authenticated user to execute arbitrary...
PT-2026-91085
Cross-site scripting vulnerability exists in CONPROSYS nano Series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
EUVD-2023-60686
An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. The backend module allows an authenticated backend user to perform various actions userLogout, confirmUser, refuseUser, and resendUserConfirmation for any frontend user in the system...
CVE-2026-84556: Improper Authorization
An authorization issue was addressed with improved access control. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data...
CVE-2026-76081: Off-by-one Error
ZITADEL is an open source identity management platform. Prior to version 4.16.0, a bug in how ZITADEL updates permissions when multiple project roles are deleted at the same time can cause some user permissions to be missed. This issue specifically affects User Grants on Granted Projects projects...
PT-2026-91540
An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data...