Lucene search
+L

4434 matches found

Cvelist
Cvelist
added 2025/12/15 6:45 a.m.30 views

CVE-2025-14023

LINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the navigation state and the in-app browser's user interface, which could create confusion about the trust context of displayed pages or interactive elements under specific conditions...

3.1CVSS0.0015EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/15 6:43 a.m.4 views

CVE-2025-14022

LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in an integrated financial SDK. The SDK interfered with the application's network processing, causing server certificate verification to be disabled for a significant portion of netwo...

7.7CVSS6.2AI score0.00168EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/15 6:43 a.m.29 views

CVE-2025-14022

LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in an integrated financial SDK. The SDK interfered with the application's network processing, causing server certificate verification to be disabled for a significant portion of netwo...

7.7CVSS0.00168EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/15 6:43 a.m.7 views

EUVD-2025-203347

LINE client for iOS prior to 15.4 allows man-in-the-middle attacks due to improper SSL/TLS certificate validation in an integrated financial SDK. The SDK interfered with the application's network processing, causing server certificate verification to be disabled for a significant portion of netwo...

7.7CVSS6AI score0.00168EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/15 12:0 a.m.4 views

Line Corporation Line Client For Ios 安全漏洞

Line Corporation Line Client For Ios is a communication application from Line Corporation, Japan. A security vulnerability exists in Line Corporation Line Client For Ios versions prior to 15.4, which stems from improper validation of SSL/TLS certificates and could lead to a man-in-the-middle atta...

7.7CVSS6.6AI score0.00168EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/15 12:0 a.m.8 views

Line Corporation Line Client For Ios 安全漏洞

Line Corporation Line Client For Ios is a communication application from Line Corporation, Japan. A security vulnerability exists in Line Corporation Line Client For Ios prior to version 15.19, which stems from an inconsistency between the navigation state and the in-app browser UI, which may lea...

4.3CVSS6.7AI score0.0015EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/15 12:0 a.m.8 views

PT-2025-51205

The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to address bar spoofing, which could allow attackers to execute malicious JavaScript within iframes while displaying trusted URLs, enabling phishing attacks through overlaid malicious content...

4.3CVSS6.9AI score0.0018EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/12/13 10:0 p.m.12 views

CVE-2025-43510

A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application may cause unexpect...

7.8CVSS6.8AI score0.00362EPSS
SaveExploits2References1
OSV
OSV
added 2025/12/12 9:15 p.m.6 views

CVE-2025-43530

This issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.2, macOS Sonoma 14.8.3, macOS Sequoia 15.7.3, iOS 18.7.3 and iPadOS 18.7.3. An app may be able to access sensitive user data...

5.5CVSS6AI score0.00205EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/12 12:0 a.m.6 views

PT-2025-54489

Name of the Vulnerable Software and Affected Versions Safari versions 26.2 tvOS versions 26.2 watchOS versions 26.2 visionOS versions 26.2 iOS versions 26.2 iPadOS versions 26.2 macOS versions Tahoe 26.2 Description A memory initialization issue exists due to improved memory handling. Processing...

6.5CVSS6.5AI score0.0061EPSS
SaveExploits0References150
CNNVD
CNNVD
added 2025/12/12 12:0 a.m.5 views

Apple多款产品 安全漏洞

Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple watchOS is a smart watch operating system. A security vulnerability exists in several Apple products, which is caused by a memory corruption...

7.8CVSS6.1AI score0.00362EPSS
SaveExploits2References8
Positive Technologies
Positive Technologies
added 2025/12/12 12:0 a.m.7 views

PT-2025-51002

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 26.1 iOS versions prior to 18.7.2 iPadOS versions prior to 18.7.2 macOS Tahoe versions prior to 26.1 visionOS versions prior to 26.1 macOS Sonoma versions prior to 14.8.2 macOS Sequoia versions prior to 15.7.2...

6.3AI score0.00512EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2025/12/12 12:0 a.m.9 views

Apple iOS < 18.7.3 Multiple Vulnerabilities (125885)

Binary data appleios1873check.nbin...

9.8CVSS9.3AI score0.32483EPSS
SaveExploits16References22
Positive Technologies
Positive Technologies
added 2025/12/05 12:0 a.m.16 views

PT-2025-49195

The KDE Connect verification-code protocol before 2025-04-18 uses only 8 characters and therefore allows brute-force attacks. This affects KDE Connect before 1.33.0 on Android, KDE Connect before 25.04 on desktop, KDE Connect before 0.5 on iOS, Valent before 1.0.0.alpha.47, and GSConnect before 5...

4.7CVSS6.9AI score0.0013EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/05 12:0 a.m.9 views

PT-2025-49221

In the KDE Connect information-exchange protocol before 2025-04-18, a packet can be crafted to temporarily change the displayed information about a device, because broadcast UDP is used. This affects KDE Connect before 1.33.0 on Android, KDE Connect before 25.04 on desktop, KDE Connect before 0.5...

4.3CVSS6.7AI score0.00102EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/12/04 8:43 p.m.3 views

CVE-2025-66555 AirKeyboard iOS App 1.0.5 - Remote Input Injection

AirKeyboard iOS App 1.0.5 contains a missing authentication vulnerability that allows unauthenticated attackers to type arbitrary keystrokes directly into the victim's iOS device in real-time without user interaction, resulting in full remote input control...

8.8CVSS6.8AI score0.00628EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/12/04 8:43 p.m.7 views

EUVD-2025-201279

AirKeyboard iOS App 1.0.5 contains a missing authentication vulnerability that allows unauthenticated attackers to type arbitrary keystrokes directly into the victim's iOS device in real-time without user interaction, resulting in full remote input control...

8.8CVSS6.7AI score0.00628EPSS
SaveExploits0References5
Wired Threat Level
Wired Threat Level
added 2025/11/27 11:30 a.m.4 views

3 Best VPN for iPhone (2025), Tested and Reviewed

There are dozens of iPhone VPNs at your disposal, but these are the services that will actually keep your browsing safe...

7.1AI score
SaveExploits0
SUSE CVE
SUSE CVE
added 2025/11/25 12:25 a.m.13 views

SUSE CVE-2025-43430

This issue was addressed through improved state management. This issue is fixed in Safari 26.1, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash...

4.3CVSS6.7AI score0.01022EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
added 2025/11/25 12:25 a.m.9 views

SUSE CVE-2025-43443

This issue was addressed with improved checks. This issue is fixed in Safari 26.1, iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. Processing maliciously crafted web content may lead to an unexpected process crash...

4.3CVSS6.5AI score0.0068EPSS
SaveExploits0References12
Rows per page
Query Builder