Apple macOS 安全漏洞

Apple macOS Sequoia is an operating system from the American company Apple Apple. Apple macOS Sequoia suffers from an information disclosure vulnerability that is caused due to an information disclosure issue in the FaceTime component when using a specially crafted application. An attacker can...

PT-2025-3366 · Unknown · Shihuo Ios

Name of the Vulnerable Software and Affected Versions: Shihuo iOS version 8.16.0 Description: The issue allows attackers to access sensitive user information by supplying a crafted link. This enables unauthorized access to confidential data. Recommendations: For Shihuo iOS version 8.16.0, conside...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 15.3, which stems from an application that may be able to access protected user data...

Govee Home 安全漏洞

Govee Home is an application from Govee, Inc. A security vulnerability exists in Govee Home version 6.5.01 that originates from an attacker being able to access sensitive user information by providing a carefully crafted link...

PT-2025-5589 · Apache · Apache Cassandra

Name of the Vulnerable Software and Affected Versions: Apache Cassandra versions 4.0.0 through 4.0.15 Apache Cassandra versions 4.1.0 through 4.1.7 Apache Cassandra versions 5.0.0 through 5.0.2 Description: The issue allows users to access a datacenter or IP/CIDR groups they should not be able to...

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management allows a perpetrator to gain access to read, modify, and delete data.

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management involves the use of open redirection. Exploiting this vulnerability could allow an attacker to gain read, modify, and delete access to data...

macOS 14.x < 14.7.3 Multiple Vulnerabilities (122069)

The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.7.3. It is, therefore, affected by multiple vulnerabilities: - An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7.3, macOS Sonoma 14.7.3, visionOS 2.3, iOS...

About the security content of macOS Sonoma 14.7.3

About the security content of macOS Sonoma 14.7.3 This document describes the security content of macOS Sonoma 14.7.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...

PT-2025-5287 · Apple · Macos Sonoma +2

Name of the Vulnerable Software and Affected Versions: macOS Sequoia versions prior to 15.3 macOS Sonoma versions prior to 14.7.3 Description: The issue is related to parsing a file, which may lead to an unexpected app termination. It is also associated with unlimited resource allocation,...

The vulnerability of the GraphQL Query Handler component of the software platform based on Git, which is used for collaborative code development in GitLab EE/CE, allows a perpetrator to access confidential information.

The vulnerability of the GraphQL Query Handler component in the Git-based software platform, which is used for collaborative code development in GitLab EE/CE, is related to the absence of authentication. Exploiting this vulnerability allows a malicious actor to gain access to confidential...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 15.3, which stems from an application that may be able to access protected user data...

PT-2025-3357 · Baidu · Baidu Input Method

Name of the Vulnerable Software and Affected Versions: Baidu Input Method version 12.6.13 Description: The issue allows attackers to access user information by supplying a crafted link. Recommendations: For version 12.6.13, update to a newer version to mitigate the risk. At the moment, there is n...

PT-2025-3370 · Unknown · Beautyplus

Name of the Vulnerable Software and Affected Versions: BeautyPlus iOS version 7.8.010 Description: The issue allows attackers to access sensitive user information by supplying a crafted link. There is no information provided about the estimated number of potentially affected devices worldwide or...

PT-2025-5272 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.3 Description: The issue is related to incorrect permission handling, which may allow an app to access protected user data. This was addressed with additional permissions checks. Recommendations: For versions prior ...

PT-2025-3369 · Govee · Govee Home

Name of the Vulnerable Software and Affected Versions: Govee Home iOS version 6.5.01 Description: The issue allows attackers to access sensitive user information via supplying a crafted payload. Recommendations: For Govee Home iOS version 6.5.01, at the moment, there is no information about a new...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed for Mac computers by Apple, Inc. A security vulnerability exists in Apple macOS version 15.2, which stems from an application that may be able to access sensitive user data...

PT-2025-5275 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.3 macOS versions prior to 14.7.3 macOS versions prior to 15.3 Description: A race condition was addressed with additional validation. This issue may allow an app to access user-sensitive data. The problem is relat...

Apple macOS 竞争条件问题漏洞

Apple macOS is a suite of specialized operating systems developed by Apple Inc. for Mac computers. A competitive condition issue vulnerability exists in Apple macOS version 15.3, which arises from an application that may be able to access sensitive user data...

The vulnerability of the IBM Sterling Secure Proxy proxy server arises from the improper assignment of permissions for the critical resource. This allows a malicious actor to gain unauthorized access to read, modify, or delete data.

The vulnerability of the IBM Sterling Secure Proxy proxy server is related to the improper assignment of permissions for the critical resource. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to read, modify, or delete data...

PT-2025-3434 · Unknown · Lifestylestore

Name of the Vulnerable Software and Affected Versions: LifestyleStore version 1.0 Description: The issue allows a remote attacker to execute unauthorized actions on behalf of an authenticated user, potentially leading to account modifications or data compromise. This is due to a Cross Site Reques...