235 matches found
CVE-2025-27998
An issue in Valvesoftware Steam Client Steam Client 1738026274 allows attackers to escalate privileges via a crafted executable or DLL...
CVE-2025-44893
creationtimestamp| type| source ---|---|--- 2025-05-20 23:13:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpn7mp56px2w...
CVE-2025-24189
The issue was addressed with improved checks. This issue is fixed in Safari 18.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Processing maliciously crafted web content may lead to memory corruption...
CVE-2025-46801
A flaw was found in Pgpool-II. This vulnerability allows an attacker to log in as an arbitrary user, enabling unauthorized access to read, modify, or disable database contents via an authentication bypass. Mitigation Mitigation for this issue is either not available or the currently available...
CVE-2024-57096
An issue in wps office before v.19302 allows a local attacker to obtain sensitive information via a crafted file...
CVE-2024-52877
CVE-2024-52877 affects Insyde InsydeH2O kernel variants prior to certain fixed builds. The root cause is a buffer over-read in the VariableRuntimeDxe driver: the SmmCreateVariableLockList() callback calls CreateVariableLockListInSmm(), which uses StrSize() to obtain the variable name size, enabli...
CVE-2024-52879
An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.38.50, kernel 5.4 before version 05.46.50, kernel 5.5 before version 05.54.50, kernel 5.6 before version 05.61.50, and kernel 5.7 before version 05.70.50. In VariableRuntimeDxe driver,...
CVE-2025-24155
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. An app may be able to disclose kernel memory...
CVE-2025-24222
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.5. Processing maliciously crafted web content may lead to an unexpected process crash...
CVE-2025-24225
An injection issue was addressed with improved input validation. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. Processing an email may lead to user interface spoofing...
CVE-2025-31195
The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.4. An app may be able to break out of its sandbox...
CVE-2025-30442
The issue was addressed with improved input sanitization. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. An app may be able to gain elevated privileges...
CVE-2025-31259
CVE-2025-31259 is a macOS Sequoia issue where an input sanitization flaw could let an app gain elevated privileges; it is fixed in macOS Sequoia 15.5 (the Nessus/macOS advisory context confirms the fix and affected product).
CVE-2025-1948
A flaw was found in Eclipse Jetty. This vulnerability allows denial of service attack via an HTTP/2 client specifying a very large value for the SETTINGSMAXHEADERLISTSIZE parameter. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red...
CVE-2025-26844
An issue was discovered in Znuny through 7.1.3. A cookie is set without the HttpOnly flag...
CVE-2025-37812
In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: Fix deadlock when using NCM gadget The cdns3 driver has the same NCM deadlock as fixed in cdnsp by commit 58f2fcb3a845 "usb: cdnsp: Fix deadlock issue during using NCM gadget". Under PREEMPTRT the deadlock can be...
CVE-2025-26847
An issue was discovered in Znuny before 7.1.5. When generating a support bundle, not all passwords are masked...
CVE-2025-45491
creationtimestamp| type| source ---|---|--- 2025-05-06 18:21:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lojis74ywh2w 2025-05-06 20:20:24+00:00| seen| https://t.me/cvedetector/24631 2025-05-07 21:30:45+00:00| seen|...
CVE-2025-4318 Input validation issue in AWS Amplify Studio UI component properties
The AWS Amplify Studio UI component property expressions in the aws-amplify/amplify-codegen-ui package lack input validation. This could potentially allow an authenticated user who has access to create or modify components to run arbitrary JavaScript code during the component rendering and build...