Lucene search
K

2110 matches found

NVD
NVD
added 2025/12/12 9:15 p.m.2 views

CVE-2025-43463

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.1. An app may be able to access sensitive user data...

5.5CVSS0.00192EPSS
Exploits0References3
NVD
NVD
added 2025/12/12 9:15 p.m.2 views

CVE-2025-43465

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data...

5.5CVSS0.0017EPSS
Exploits0References1
CVE
CVE
added 2025/12/12 8:56 p.m.8 views

CVE-2025-43463

CVE-2025-43463 describes a parsing issue in handling directory paths that was mitigated by improved path validation. It affects macOS Sonoma 14.8.3, macOS Tahoe 26.1, and macOS Sequoia 15.7.3, where an app may be able to access sensitive user data. The connected sources corroborate this path-vali...

5.5CVSS6.5AI score0.00192EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/12 8:56 p.m.2 views

CVE-2025-43463

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.1. An app may be able to access sensitive user data...

6.6AI score0.00192EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/12/12 8:56 p.m.17 views

CVE-2025-43463

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.1. An app may be able to access sensitive user data...

0.00192EPSS
Exploits0References3
EUVD
EUVD
added 2025/12/12 8:56 p.m.3 views

EUVD-2025-203141

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sonoma 14.8.3, macOS Tahoe 26.1, macOS Sequoia 15.7.3. An app may be able to access sensitive user data...

5.6AI score0.00192EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/12/12 8:56 p.m.2 views

CVE-2025-43465

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data...

5.7AI score0.0017EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/12 8:56 p.m.15 views

CVE-2025-43465

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive user data...

0.0017EPSS
Exploits0References1
CVE
CVE
added 2025/12/12 8:56 p.m.9 views

CVE-2025-43465

CVE-2025-43465 affects macOS Tahoe prior to 26.1, where a directory-path parsing flaw could allow an app to access sensitive user data. The issue was fixed in macOS Tahoe 26.1 via improved path validation. Remediation: update to macOS 26.1.

5.5CVSS5.7AI score0.0017EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/12/12 6:31 a.m.4 views

EUVD-2025-203003

The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'pluploadajaxdeletefile' function in all versions up to, and including, 1.1.7. This makes it possible for unauthenticated attackers to delete arbitrar...

9.8CVSS5.8AI score0.00459EPSS
Exploits0References3
NVD
NVD
added 2025/12/12 4:15 a.m.4 views

CVE-2025-14344

The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'pluploadajaxdeletefile' function in all versions up to, and including, 1.1.7. This makes it possible for unauthenticated attackers to delete arbitrar...

9.8CVSS0.00459EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/12 3:20 a.m.4 views

CVE-2025-14344 Multi Uploader for Gravity Forms <= 1.1.7 - Unauthenticated Arbitrary File Deletion

The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'pluploadajaxdeletefile' function in all versions up to, and including, 1.1.7. This makes it possible for unauthenticated attackers to delete arbitrar...

9.8CVSS5.8AI score0.00459EPSS
Exploits0References3
CVE
CVE
added 2025/12/12 3:20 a.m.22 views

CVE-2025-14344

CVE-2025-14344 : WordPress plugin Multi Uploader for Gravity Forms is vulnerable in all versions up to 1.1.7 due to insufficient file path validation in plupload_ajax_delete_file, enabling unauthenticated arbitrary file deletion on the server. Connected sources confirm the issue and note a patch ...

9.8CVSS5.8AI score0.00459EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/12 12:0 a.m.1 views

WordPress plugin WP User Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

6.8CVSS6.5AI score0.00687EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/12/12 12:0 a.m.3 views

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma prior to 14.8.3, Apple macOS Tahoe prior to 26.1, and Apple macOS Sequoia prior to 15.7.3, which stems from insufficient pa...

5.5CVSS6.1AI score0.00192EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/12/12 12:0 a.m.2 views

Apple macOS Tahoe 安全漏洞

Apple macOS Tahoe is an operating system from Apple USA. A security vulnerability exists in Apple macOS Tahoe versions prior to 26.1, which stems from insufficient path validation and could result in an application accessing sensitive user data...

5.5CVSS6.1AI score0.0017EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/12/12 12:0 a.m.6 views

macOS 15.x < 15.7.3 Multiple Vulnerabilities (125887)

The remote host is running a version of macOS / Mac OS X that is 15.x prior to 15.7.3. It is, therefore, affected by multiple vulnerabilities: - A vulnerability has been identified in the libarchive library. This flaw can be triggered when file streams are piped into bsdtar, potentially allowing...

9.8CVSS7.1AI score0.16212EPSS
Exploits2References27
Zero Day Initiative
Zero Day Initiative
added 2025/12/11 12:0 a.m.2 views

(0Day) pdfforge PDF Architect CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

7.8CVSS7.2AI score0.00372EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/12/11 12:0 a.m.6 views

TencentOS Server 4: mariadb (TSSA-2025:0941)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0941 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

7CVSS7.6AI score0.00398EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/10 6:30 p.m.4 views

EUVD-2025-202451

Jenkins Redpen - Pipeline Reporter for Jira Plugin has a path traversal vulnerability...

4.3CVSS6.5AI score0.0029EPSS
Exploits0References3
Rows per page
Query Builder