Lucene search
+L

8033 matches found

Positive Technologies
Positive Technologies
•added 2025/03/31 12:00 a.m.•25 views

PT-2025-55368

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sequoia 15.4 Description An app may be able to access protected user data due to improper handling of symlinks symbolic links, which are files that act as pointers to other files or directories. Recommendations Update t...

5.5CVSS5.4AI score0.0014EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•2 views

CVE-2025-30460: Improper Access Control

A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access protected user data...

7.4CVSS5.8AI score0.00756EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/31 12:00 a.m.•2 views

PT-2025-13989

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.4 Description An access issue was addressed with additional sandbox restrictions on the system pasteboards. This issue allows an app to potentially access protected user data. Recommendations For versions pri...

9.8CVSS0.00663EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/03/31 12:00 a.m.•2 views

PT-2025-13933

Name of the Vulnerable Software and Affected Versions macOS Ventura versions prior to 13.7.5 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description The issue allows an app to access protected user data due to improper handling of symlinks. This has been addressed...

9.8CVSS0.00957EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•3 views

CVE-2024-54533: Improper Access Control

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access sensitive user data...

7CVSS5.7AI score0.00721EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•4 views

CVE-2025-24181: Missing Authorization

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access protected user data...

9.8CVSS8.1AI score0.01034EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•16 views

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS that originates from an application that may access protected user data...

9.8CVSS6.2AI score0.00663EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/03/31 12:00 a.m.•11 views

PT-2025-13906 · Apple · Ios +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18.4 iPadOS versions prior to 18.4 tvOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 Description: The issue allows an app to potentially access sensitive user data due to inadequate redaction of sensitive...

5.5CVSS5.8AI score0.0028EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/03/31 12:00 a.m.•19 views

PT-2025-13800

Name of the Vulnerable Software and Affected Versions Beego versions prior to 2.3.6 Description Beego is an open-source web framework for the Go programming language. A Cross-Site Scripting XSS vulnerability exists in the RenderForm function due to improper HTML escaping of user-controlled data...

9.6CVSS6.2AI score0.00603EPSS
SaveExploits1References29
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•17 views

Apple iOS和Apple iPadOS 信息泄露漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS and Apple iPadOS, which stems from the fact that applications may be able to...

9.8CVSS6.1AI score0.01211EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/03/31 12:00 a.m.•3 views

PT-2025-13911

Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.7.5 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description A logic issue was addressed with improved checks, which may have allowed a sandboxed app to access sensitive user data...

7.4CVSS0.00778EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•18 views

Apple macOS 信息泄露漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS that originates from an application that may access sensitive user data...

5.5CVSS6.1AI score0.00239EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•4 views

CVE-2025-24278: Improper Link Resolution Before File Access

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access protected user data...

5.5CVSS5.8AI score0.00282EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•24 views

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS and Apple iPadOS that arises from privacy concerns and could result in access...

5.5CVSS6.1AI score0.00282EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•13 views

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems from the U.S.-based Apple Inc. developed specifically for Mac computers. A security vulnerability exists in Apple macOS Sonoma, which stems from a permissions issue that could result in an application accessing sensitive user data...

7CVSS7.1AI score0.00721EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/03/29 12:00 a.m.•5 views

PT-2025-34091

Уязвимость функции gf isom get user data count утилиты MP4Box мультимедийной платформы GPAC связана с разыменованием нулевого указателя. Эксплуатация уязвимости может позволить нарушителю вызывать отказ в обслуживании...

4.6CVSS5.8AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/03/29 12:00 a.m.•50 views

PT-2026-48159

Name of the Vulnerable Software and Affected Versions GPAC MP4Box version 2.4 Description A NULL pointer dereference occurs in the gf isom get user data count function within the isomedia/isom read.c file. This issue allows attackers to cause a Denial of Service DoS, which is a condition where a...

5.5CVSS5.2AI score0.00192EPSS
SaveExploits1References19
RedhatCVE
RedhatCVE
•added 2025/03/28 10:40 p.m.•42 views

CVE-2025-20230

In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8, and versions below 3.8.38 and 3.7.23 of the Splunk Secure Gateway app on Splunk Cloud Platform, a low-privileged user that does not hold the “admin“ or “power“ Splunk roles could edit and delete other user data in App Key Value...

4.3CVSS7.1AI score0.00319EPSS
SaveExploits0References3
CNVD
CNVD
•added 2025/03/28 12:00 a.m.•24 views

Yonyou UFIDA ERP-NC /menu.jsp file cross-site scripting vulnerability

Yonyou UFIDA ERP-NC is a kind of Enterprise Resource Planning ERP software, which is mainly used for financial management, supply chain management, production management and customer relationship management of enterprises. Yonyou UFIDA ERP-NC suffers from a cross-site scripting vulnerability that...

6.1CVSS4.7AI score0.00938EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/03/28 12:00 a.m.•30 views

Yonyou UFIDA ERP-NC /help/systop.jsp file cross-site scripting vulnerability

Yonyou UFIDA ERP-NC is a kind of Enterprise Resource Planning ERP software, which is mainly used for financial management, supply chain management, production management and customer relationship management of enterprises. Yonyou UFIDA ERP-NC suffers from a cross-site scripting vulnerability, whi...

6.1CVSS4.7AI score0.00938EPSS
SaveExploits1References1
Rows per page
Query Builder