Lucene search
K

33 matches found

Cvelist
Cvelist
added 2025/12/09 3:55 p.m.18 views

CVE-2025-5469 Dylib Hijacking in Yandex Messenger

Uncontrolled Search Path Element vulnerability in Yandex Messenger on MacOS allows Search Order Hijacking.This issue affects Telemost: before 2.245...

8.8CVSS0.00019EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/09 3:55 p.m.4 views

CVE-2025-5469 Dylib Hijacking in Yandex Messenger

Uncontrolled Search Path Element vulnerability in Yandex Messenger on MacOS allows Search Order Hijacking.This issue affects Telemost: before 2.245...

8.8CVSS6.6AI score0.00019EPSS
Exploits0References1
CVE
CVE
added 2025/12/09 3:55 p.m.18 views

CVE-2025-5469

CVE-2025-5469 is described as an Uncontrolled Search Path Element vulnerability in Yandex Messenger on macOS, enabling search order hijacking and affecting Telemost before version 2.245. Public sources in the connected set corroborate this for Telemost prior to 2.245 and identify the root cause a...

8.8CVSS6.6AI score0.00019EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/09 3:53 p.m.3 views

CVE-2025-5471 Dylib Hijacking in Yandex Telemost

Uncontrolled Search Path Element vulnerability in Yandex Telemost on MacOS allows Search Order Hijacking.This issue affects Telemost: before 2.19.1...

8.8CVSS6.6AI score0.00018EPSS
Exploits0References1
CVE
CVE
added 2025/12/09 3:53 p.m.7 views

CVE-2025-5471

CVE-2025-5471 affects Yandex Telemost on macOS, before version 2.19.1. The root cause is an uncontrolled Search Path Element, enabling search-order hijacking (dylib hijacking). Impact per sources is high on confidentiality, integrity, and availability when a malicious library is loaded via a mani...

8.8CVSS6.6AI score0.00018EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/12/09 3:53 p.m.16 views

CVE-2025-5471 Dylib Hijacking in Yandex Telemost

Uncontrolled Search Path Element vulnerability in Yandex Telemost on MacOS allows Search Order Hijacking.This issue affects Telemost: before 2.19.1...

8.8CVSS0.00018EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/09 3:50 p.m.5 views

CVE-2025-5470 Dylib Hijacking in Yandex Disk

Uncontrolled Search Path Element vulnerability in Yandex Disk on MacOS allows Search Order Hijacking.This issue affects Disk: before 3.2.45.3275...

8.8CVSS6.6AI score0.00019EPSS
Exploits0References1
CVE
CVE
added 2025/12/09 3:50 p.m.11 views

CVE-2025-5470

The CVE-2025-5470 entry details an Uncontrolled Search Path Element vulnerability in Yandex Disk for MacOS, enabling Search Order Hijacking. Affected: Yandex Disk on macOS prior to 3.2.45.3275. Root cause: improper control of the search path element. Impact is described as high across confidentia...

8.8CVSS6.6AI score0.00019EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-5501

Malicious code in bioql PyPI...

8.4CVSS6.6AI score0.001EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-47341

Malicious code in bioql PyPI...

7.8CVSS6.6AI score0.00058EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-8213

Malicious code in bioql PyPI...

8.4CVSS6.6AI score0.00105EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 4:22 a.m.5 views

CVE-2023-42920

Claris International has fixed a dylib hijacking vulnerability in the FileMaker Pro.app and Claris Pro.app versions on macOS...

7.8CVSS6.9AI score0.00058EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/03/28 5:50 p.m.4 views

CVE-2025-2098

Fast CAD Reader application on MacOS was found to be installed with incorrect file permissions rwxrwxrwx. This is inconsistent with standard macOS security practices, where applications should have drwxr-xr-x permissions. Incorrect permissions allow for Dylib Hijacking. Guest account, other users...

8.4CVSS7.3AI score0.00105EPSS
Exploits0References4
NVD
NVD
added 2025/03/26 4:15 p.m.9 views

CVE-2025-2098

Fast CAD Reader application on MacOS was found to be installed with incorrect file permissions rwxrwxrwx. This is inconsistent with standard macOS security practices, where applications should have drwxr-xr-x permissions. Incorrect permissions allow for Dylib Hijacking. Guest account, other users...

8.4CVSS0.00105EPSS
Exploits0References2
CVE
CVE
added 2025/03/26 3:23 p.m.60 views

CVE-2025-2098

CVE-2025-2098 affects Fast CAD Reader on macOS. The issue is improper file permissions (rwxrwxrwx) for the application, diverging from macOS practice of drwxr-xr-x, enabling potential Dylib Hijacking and privilege escalation. Impact is described as local: guest/other users and applications could ...

8.4CVSS7.3AI score0.00105EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/03/26 3:23 p.m.12 views

CVE-2025-2098 Dylib Hijacking in Fast CAD Reader

Fast CAD Reader application on MacOS was found to be installed with incorrect file permissions rwxrwxrwx. This is inconsistent with standard macOS security practices, where applications should have drwxr-xr-x permissions. Incorrect permissions allow for Dylib Hijacking. Guest account, other users...

8.4CVSS7.3AI score0.00105EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/03/26 3:23 p.m.9 views

CVE-2025-2098 Dylib Hijacking in Fast CAD Reader

Fast CAD Reader application on MacOS was found to be installed with incorrect file permissions rwxrwxrwx. This is inconsistent with standard macOS security practices, where applications should have drwxr-xr-x permissions. Incorrect permissions allow for Dylib Hijacking. Guest account, other users...

8.4CVSS0.00105EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/03/26 12:0 a.m.2 views

Honghu Yuntu Fast CAD Reader 安全漏洞

Honghu Yuntu Fast CAD Reader is a CAD reader from the Chinese company Honghu Yuntu. A security vulnerability exists in Honghu Yuntu Fast CAD Reader 4.1.5 and earlier versions, which can lead to Dylib hijacking and elevation of privilege due to improperly set file permissions...

8.4CVSS6.8AI score0.00105EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/03/26 12:0 a.m.3 views

PT-2025-12971 · Unknown · Fast Cad Reader

Name of the Vulnerable Software and Affected Versions: Fast CAD Reader versions prior to a fixed version no specific fixed version mentioned, affected versions not specified Description: The Fast CAD Reader application on MacOS was found to be installed with incorrect file permissions rwxrwxrwx,...

8.4CVSS6.1AI score0.00105EPSS
Exploits0References103
RedhatCVE
RedhatCVE
added 2025/03/02 9:20 a.m.14 views

CVE-2025-1413

DaVinci Resolve on MacOS was found to be installed with incorrect file permissions rwxrwxrwx. This is inconsistent with standard macOS security practices, where applications should have drwxr-xr-x permissions. Incorrect permissions allow for Dylib Hijacking. Guest account, other users and...

8.4CVSS6.9AI score0.001EPSS
Exploits0References1
Rows per page
Query Builder