3288 matches found
CVE-2025-8672
The CVE describes a TCC bypass in macOS GIMP where a bundled Python interpreter inherits the user’s TCC permissions granted to GIMP. With local access, an attacker can invoke this interpreter to run arbitrary commands and access files in privacy-protected folders without prompting the user, abusi...
CVE-2025-8672
MacOS version of GIMP bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the application...
GIMP security vulnerabilities
GIMP is an open source bitmap image editor from the GIMP team. A security vulnerability exists in GIMP that stems from the Python interpreter inheriting TCC permissions, which could lead to unauthorized access to privacy-protected folders...
CVE-2025-8672: Incorrect Default Permissions
MacOS version of GIMP bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the application...
[SECURITY] Fedora 41 Update: perl-5.40.3-517.fc41
Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...
[SECURITY] Fedora 42 Update: perl-5.40.3-519.fc42
Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...
Improper Validation of Specified Type of Input
Overview Affected versions of this package are vulnerable to Improper Validation of Specified Type of Input via the url validator in jdbc interpreter. An attacker can access arbitrary files on the system by submitting a specially crafted, non UTF-8 encoded JDBC connection string. Note: This issue...
UBUNTU-CVE-2025-38386
In the Linux kernel, the following vulnerability has been resolved: ACPICA: Refuse to evaluate a method if arguments are missing As reported in 1, a platform firmware update that increased the number of method parameters and forgot to update a least one of its callers, caused ACPICA to crash due ...
Running in CIRCLE? A Simple Benchmark for LLM Code Interpreter Security
As large language models LLMs increasingly integrate native code interpreters, they enable powerful real-time execution capabilities, substantially expanding their utility. However, such integrations introduce potential system-level cybersecurity threats, fundamentally different from prompt-based...
org.apache.iotdb:zeppelin-iotdb (>=1.3.0, <=2.0.3), org.apache.zeppelin:flink-parent (>=0.10.1, <=0.11.2) +72 more potentially affected by CVE-2024-41169 via org.apache.zeppelin:zeppelin-interpreter (>=0.10.1, <=0.11.2)
org.apache.zeppelin:zeppelin-interpreter MAVEN version =0.10.1, =1.3.0, =0.10.1, =0.11.0, =0.10.1, =0.11.0, =0.11.0, =0.11.0, =0.10.1, =0.10.1, =0.10.1, =0.11.2 and more Source cves: CVE-2024-41169 Source advisory: OSV:GHSA-7PGF-PPXW-8624...
Exposure of Sensitive System Information to an Unauthorized Control Sphere
Overview Affected versions of this package are vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere via the raft server protocol. An attacker can access sensitive server resources, including directories and files, by sending unauthenticated requests. Remediatio...
Exposure of Sensitive System Information to an Unauthorized Control Sphere
Overview Affected versions of this package are vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere via the raft server protocol. An attacker can access sensitive server resources, including directories and files, by sending unauthenticated requests. Remediatio...
org.apache.iotdb:zeppelin-iotdb (>=1.3.0, <=2.0.3), org.apache.zeppelin:flink-parent (>=0.10.1, <=0.11.2) +72 more potentially affected by CVE-2024-41169 via org.apache.zeppelin:zeppelin-interpreter (>=0.10.1, <=0.11.2)
org.apache.zeppelin:zeppelin-interpreter MAVEN version =0.10.1, =1.3.0, =0.10.1, =0.11.0, =0.10.1, =0.11.0, =0.11.0, =0.11.0, =0.10.1, =0.10.1, =0.10.1, =0.11.2 and more Source cves: CVE-2024-41169 Source advisory: SNYK:JAVA-ORGAPACHEZEPPELIN-10743192...
org.apache.iotdb:zeppelin-iotdb (>=1.3.0, <=2.0.3), org.apache.zeppelin:flink-parent (>=0.10.1, <=0.11.2) +72 more potentially affected by CVE-2024-41169 via org.apache.zeppelin:zeppelin-interpreter (>=0.10.1, <=0.11.2)
org.apache.zeppelin:zeppelin-interpreter MAVEN version =0.10.1, =1.3.0, =0.10.1, =0.11.0, =0.10.1, =0.11.0, =0.11.0, =0.11.0, =0.10.1, =0.10.1, =0.10.1, =0.11.2 and more Source cves: CVE-2024-41169 Source advisory: GHSA-7PGF-PPXW-8624...
org.apache.iotdb:zeppelin-iotdb (>=1.3.0, <=2.0.3), org.apache.zeppelin:flink-parent (>=0.10.1, <=0.11.2) +72 more potentially affected by CVE-2024-41169 via org.apache.zeppelin:zeppelin-interpreter (>=0.10.1, <=0.11.2)
org.apache.zeppelin:zeppelin-interpreter MAVEN version =0.10.1, =1.3.0, =0.10.1, =0.11.0, =0.10.1, =0.11.0, =0.11.0, =0.11.0, =0.10.1, =0.10.1, =0.10.1, =0.11.2 and more Source cves: CVE-2024-41169 Source advisory: MEND:CVE-2024-41169...
UBUNTU-CVE-2024-25178
LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240314 have an out-of-bounds read in the stack-overflow handler in ljstate.c...
ROS-20250624-04
A vulnerability in the Lua script interpreter is related to segmentation errors in changedline in ldebug.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
Control Validation: The Missing Link in Security Assurance
Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all on CAASM & CDMB Inefficiencies! You've got the prettiest security...
UBUNTU-CVE-2025-48945
pycares is a Python module which provides an interface to c-ares. c-ares is a C library that performs DNS requests and name resolutions asynchronously. Prior to version 4.9.0, pycares is vulnerable to a use-after-free condition that occurs when a Channel object is garbage collected while DNS...
CVE-2025-48945
pycares is a Python module which provides an interface to c-ares. c-ares is a C library that performs DNS requests and name resolutions asynchronously. Prior to version 4.9.0, pycares is vulnerable to a use-after-free condition that occurs when a Channel object is garbage collected while DNS...