39404 matches found
CVE-2025-25334
An issue in Suning Commerce Group Suning EMall iOS 9.5.198 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2025-25329
An issue in Tencent Technology Beijing Company Limited Tencent MicroVision iOS 8.137.0 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2025-25334
A security vulnerability exists in Suning Commerce Group Suning EMall iOS version 9.5.198 . The issue stems from the improper neutralization of encoded URI schemes in a web page, which allows an attacker to access sensitive user information by supplying a crafted link . While the vulnerability is...
CVE-2025-25324
The Shandong Provincial Big Data Center AiShanDong application, specifically version 5.0.0 on iOS , contains a vulnerability that allows attackers to access sensitive user information . The root cause is the improper neutralization of encoded URI schemes in a web page, which can be triggered by p...
CVE-2025-25326
A security vulnerability exists in the Merchants Union Finance iOS application (version 6.19.0 ) by Merchants Union Consumer Finance Company Limited. The issue is caused by improper neutralization of encoded URI schemes in a web page, which allows an attacker to access sensitive user information ...
CVE-2025-25326
An issue in Merchants Union Consumer Finance Company Limited Merchants Union Finance iOS 6.19.0 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2025-25330
An issue in Boohee Technology Boohee Health iOS 13.0.13 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2025-25331
An issue in Beitatong Technology LianJia iOS 9.83.50 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2025-25331
A security vulnerability exists in Beitatong Technology LianJia iOS version 9.83.50 , a rental and second-hand real estate transaction software. The flaw allows attackers to access sensitive user information by providing a specially crafted link . The root cause is identified as the improper neut...
CVE-2025-25324
An issue in Shandong Provincial Big Data Center AiShanDong iOS 5.0.0 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2025-25323
An issue in Qianjin Network Information Technology Shanghai Co., Ltd 51Job iOS 14.22.0 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2025-25334
An issue in Suning Commerce Group Suning EMall iOS 9.5.198 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2025-25330
The Boohee Health weight loss and fitness management software for iOS is affected by CVE-2025-25330 . A security vulnerability in version 13.0.13 allows an attacker to gain access to sensitive user information by providing a specially crafted link . The root cause is identified as the improper ne...
CVE-2025-25333
The IKEA CN iOS application, specifically version 4.13.0 , contains a security vulnerability that enables an attacker to access sensitive user information . The root cause is triggered by providing a specially crafted link . While technical exploitation details are not provided, a proof-of-concep...
CVE-2025-25331
An issue in Beitatong Technology LianJia iOS 9.83.50 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2022-49551
In the Linux kernel, the following vulnerability has been resolved: usb: isp1760: Fix out-of-bounds array access Running the driver through kasan gives an interesting splat: BUG: KASAN: global-out-of-bounds in isp1760register+0x180/0x70c Read of size 20 at addr f1db2e64 by task swapper/0/1...
CVE-2022-49394
The CVE-2022-49394 entry describes a Linux kernel vulnerability in blk-iolatency where inflight IO counters could become imbalanced and IOs hang when a cgroup with iolatency is offline or disabled. The root cause is that enabled counters could be manipulated in iolatency_set_limit() and iolatency...
Cisco IOS Software on Industrial Ethernet Series Switches Access Control List Bypass (cisco-sa-repacl-9eXgnBpD)
According to its self-reported version, Cisco IOS is affected by a vulnerability. - A vulnerability in the access control list ACL programming of Cisco IOS Software running on Cisco Industrial Ethernet 4000, 4010, and 5000 Series Switches could allow an unauthenticated, remote attacker to bypass ...
Security Vulnerabilities fixed in Firefox for iOS 136 — Mozilla
Malicious websites utilizing a server-side redirect to an internal error page could result in a spoofed website URL Websites redirecting to a non-HTTP scheme URL could allow a website address to be spoofed for a malicious page Scanning certain QR codes that included text with a website URL could...
CVE-2025-25300
smartbanner.js is a customizable smart app banner for iOS and Android. Prior to version 1.14.1, clicking on smartbanner View link and navigating to 3rd party page leaves window.opener exposed. It may allow hostile third parties to abuse window.opener, e.g. by redirection or injection on the...