Lucene search
+L

22651 matches found

Vulnrichment
Vulnrichment
•added 2025/03/31 10:24 p.m.•17 views

CVE-2025-24193

This issue was addressed with improved authentication. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker with a USB-C connection to an unlocked device may be able to programmatically access photos...

5.9AI score0.00485EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/31 10:24 p.m.•44 views

CVE-2025-24193

This issue was addressed with improved authentication. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker with a USB-C connection to an unlocked device may be able to programmatically access photos...

0.00485EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/31 10:24 p.m.•99 views

CVE-2025-24193

The iOS and iPadOS operating systems are vulnerable to an access control error that allows an attacker with a USB-C connection to an unlocked device to programmatically access photos . This issue was addressed through improved authentication and is fixed in versions iOS 18.4 and iPadOS 18.4 . Exp...

2.4CVSS5.7AI score0.00485EPSS
SaveExploits0References2Affected Software2
Positive Technologies
Positive Technologies
•added 2025/03/31 12:00 a.m.•25 views

PT-2025-13886 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18.4 iPadOS versions prior to 18.4 Description: The issue allows an attacker with a USB-C connection to an unlocked device to programmatically access photos. This is achieved through a lack of proper authentication. The...

5CVSS8.8AI score0.00485EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•2 views

CVE-2025-24193: Improper Access Control

This issue was addressed with improved authentication. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker with a USB-C connection to an unlocked device may be able to programmatically access photos...

2.4CVSS7AI score0.00485EPSS
SaveExploits0References1
Ubuntu
Ubuntu
•added 2025/03/28 2:01 p.m.•55 views

USN-7387-3: Linux kernel (Real-time) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - Supe...

9.8CVSS6.6AI score0.04117EPSS
SaveExploits3
RedhatCVE
RedhatCVE
•added 2025/03/28 12:36 p.m.•23 views

CVE-2025-31335

A flaw was found in the OpenSAML C++ library. This vulnerability allows forging signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the...

4CVSS7AI score0.00242EPSS
SaveExploits0References7
OSV
OSV
•added 2025/03/28 6:15 a.m.•14 views

DEBIAN-CVE-2025-31335

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

4CVSS4.8AI score0.00242EPSS
SaveExploits0References1
OSV
OSV
•added 2025/03/28 6:15 a.m.•27 views

CVE-2025-31335

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

7.2AI score
SaveExploits0References4
NVD
NVD
•added 2025/03/28 6:15 a.m.•46 views

CVE-2025-31335

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

4CVSS0.00242EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/28 12:00 a.m.•4 views

CVE-2025-31335: Improper Verification of Cryptographic Signature

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

4CVSS5.5AI score0.00242EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/28 12:00 a.m.•47 views

CVE-2025-31335

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

4CVSS0.00242EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/03/28 12:00 a.m.•18 views

CVE-2025-31335

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

4CVSS7.2AI score0.00242EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2025/03/28 12:00 a.m.•78 views

CVE-2025-31335

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

4CVSS4.8AI score0.00242EPSS
SaveExploits0
Mend
Mend
•added 2025/03/28 12:00 a.m.•6 views

CVE-2025-31335

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures...

6.3CVSS0.00242EPSS
SaveExploits0References4
CVE
CVE
•added 2025/03/28 12:00 a.m.•108 views

CVE-2025-31335

CVE-2025-31335 affects the OpenSAML C++ library prior to 3.3.1, where parameter manipulation can forge signed SAML messages for bindings that rely on non-XML signatures. The issue is confirmed in multiple feeds referencing OpenSAML

4CVSS4.5AI score0.00242EPSS
SaveExploits0References4
NVD
NVD
•added 2025/03/27 5:15 p.m.•33 views

CVE-2023-52938

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Don't attempt to resume the ports before they exist This will fix null pointer dereference that was caused by the driver attempting to resume ports that were not yet registered...

5.5CVSS0.00211EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/03/27 4:37 p.m.•7 views

CVE-2023-52938 usb: typec: ucsi: Don't attempt to resume the ports before they exist

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Don't attempt to resume the ports before they exist This will fix null pointer dereference that was caused by the driver attempting to resume ports that were not yet registered...

5.9AI score0.00211EPSS
SaveExploits0References2
CVE
CVE
•added 2025/03/27 4:37 p.m.•158 views

CVE-2023-52938

CVE-2023-52938 concerns the Linux kernel in the usb: typec: ucsi area. The issue occurs when the driver tries to resume USB-C ports that have not yet been registered, causing a NULL pointer dereference. The attached connected documents confirm the vulnerability and its fix in the kernel, with ref...

5.5CVSS6.6AI score0.00211EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2025/03/27 4:37 p.m.•58 views

CVE-2023-52938

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Don't attempt to resume the ports before they exist This will fix null pointer dereference that was caused by the driver attempting to resume ports that were not yet registered...

5.5CVSS5.3AI score0.00211EPSS
SaveExploits0
Rows per page
Query Builder