CVE-2025-24101

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.3. An app may be able to access user-sensitive data...

CVE-2025-24135

This issue was addressed with improved message validation. This issue is fixed in macOS Sequoia 15.3. An app may be able to gain elevated privileges...

CVE-2025-24154

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, visionOS 2.3. An attacker may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2024-54468

The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2, tvOS 18.2, watchOS 11.2. An app may be able to break out of its sandbox...

CVE-2025-24112

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3. Parsing a file may lead to an unexpected app termination...

CVE-2025-24112

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3. Parsing a file may lead to an unexpected app termination...

CVE-2024-54541

The CVE-2024-54541 entry affects Apple platforms and is addressed by patches in multiple OS updates. Affected products include macOS Ventura 13.7.2; macOS Sonoma 14.7.2; macOS Sequoia 15.2; visionOS 2.2; tvOS 18.2; watchOS 11.2; iOS 18.2; and iPadOS 18.2. Description indicates an app may access u...

CVE-2024-56964

An issue in Che Hao Duo Used Automobile Agency Beijing Co., Ltd Guazi Used Car iOS 10.15.1 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56948

creationtimestamp| type| source ---|---|--- 2025-01-27 18:49:25+00:00| seen| https://infosec.exchange/users/cve/statuses/113901814745144782 2025-01-27 19:15:42+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqnnjwp562f 2025-01-27 22:25:00+00:00| seen|...

CVE-2025-24367

Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on the server. This vulnerability is fixed...

CVE-2025-24356

fastd is a VPN daemon which tunnels IP packets and Ethernet frames over UDP. When receiving a data packet from an unknown IP address/port combination, fastd will assume that one of its connected peers has moved to a new address and initiate a reconnect by sending a handshake packet. This "fast...

CVE-2025-24356 UDP traffic amplification via fastd's fast reconnect feature

fastd is a VPN daemon which tunnels IP packets and Ethernet frames over UDP. When receiving a data packet from an unknown IP address/port combination, fastd will assume that one of its connected peers has moved to a new address and initiate a reconnect by sending a handshake packet. This "fast...

CVE-2024-27256

creationtimestamp| type| source ---|---|--- 2025-01-27 16:36:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113901292405068539 2025-01-27 17:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqgwy6dtz2r...

CVE-2023-52292

creationtimestamp| type| source ---|---|--- 2025-01-27 16:14:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113901204902829019 2025-01-27 16:16:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqdmftjcx2r 2025-01-27 17:40:27+00:00| seen|...

CVE-2024-45598

creationtimestamp| type| source ---|---|--- 2025-01-27 15:51:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113901113279203094 2025-01-27 16:16:19+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqdms73z22e 2025-01-27 17:40:18+00:00| seen|...

CVE-2025-24590

creationtimestamp| type| source ---|---|--- 2025-01-27 15:16:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqabxlajn2r...

CVE-2025-24538

creationtimestamp| type| source ---|---|--- 2025-01-27 15:16:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqabsjxzp2n...

CVE-2025-23849

creationtimestamp| type| source ---|---|--- 2025-01-27 15:16:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqabkf4mt2c...

CVE-2025-24600

Missing Authorization vulnerability in davidfcarr RSVPMarker rsvpmaker.This issue affects RSVPMarker : from n/a through = 11.4.5...

CVE-2025-24540

CVE-2025-24540 is a CSRF vulnerability in the WordPress plugin SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd (versions n/a through 6.18.9). The flaw affects the SeedProd plugin’s CSRF protection, enabling cross-site forgery in affected installs. The reported CVSS-li...