Lucene search
+L

14026 matches found

NVD
NVD
added 2026/01/22 5:16 p.m.12 views

CVE-2025-68073

Missing Authorization vulnerability in Ninja Team GDPR CCPA Compliance Support ninja-gdpr-compliance allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GDPR CCPA Compliance Support: from n/a through = 2.7.4...

6.5CVSS0.00286EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 4:52 p.m.6 views

CVE-2025-68073 WordPress GDPR CCPA Compliance Support plugin <= 2.7.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ninja Team GDPR CCPA Compliance Support ninja-gdpr-compliance allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GDPR CCPA Compliance Support: from n/a through = 2.7.4...

6.5CVSS5.9AI score0.00286EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/01/22 3:48 p.m.10 views

GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write

A flaw was found in GnuPG. An attacker can provide crafted input to the armorfilter function, which incorrectly increments an index variable, leading to an out-of-bounds write. This memory corruption vulnerability may allow for information disclosure and could potentially lead to arbitrary code...

7.8CVSS6AI score0.00148EPSS
SaveExploits1References9
NVD
NVD
added 2026/01/22 3:16 p.m.15 views

CVE-2025-15523

MacOS version of Inkscape bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the...

4.8CVSS0.00155EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/01/22 3:16 p.m.9 views

CVE-2025-15523

MacOS version of Inkscape bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the...

4.8CVSS5.9AI score0.00155EPSS
SaveExploits0References3
OSV
OSV
added 2026/01/22 3:16 p.m.14 views

UBUNTU-CVE-2025-15523

MacOS version of Inkscape bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the...

4.8CVSS5.9AI score0.00155EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
added 2026/01/22 2:45 p.m.23 views

CVE-2025-15523

MacOS version of Inkscape bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the...

4.8CVSS5.7AI score0.00155EPSS
SaveExploits0References2
CVE
CVE
added 2026/01/22 2:45 p.m.63 views

CVE-2025-15523

The CVE-2025-15523 issue affects the MacOS version of Inkscape. A Python interpreter bundled with Inkscape inherits the app’s user-granted TCC permissions, enabling a local attacker to invoke the interpreter to run arbitrary commands or scripts and access files in privacy-protected folders withou...

4.8CVSS5.7AI score0.00155EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/01/22 2:45 p.m.40 views

CVE-2025-15523 TCC Bypass via Inherited Permissions in Bundled Interpreter in Inkscape.app

MacOS version of Inkscape bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the...

4.8CVSS0.00155EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/01/22 2:45 p.m.18 views

CVE-2025-15523

MacOS version of Inkscape bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the...

4.8CVSS5.6AI score0.00155EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/01/22 2:45 p.m.8 views

CVE-2025-15523

MacOS version of Inkscape bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the...

4.8CVSS5.6AI score0.00155EPSS
SaveExploits0References3
OSV
OSV
added 2026/01/22 2:45 p.m.15 views

CVE-2025-15523 TCC Bypass via Inherited Permissions in Bundled Interpreter in Inkscape.app

MacOS version of Inkscape bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the...

4.8CVSS6AI score
SaveExploits0References5
OSV
OSV
added 2026/01/22 10:18 a.m.8 views

RHSA-2026:0974 Red Hat Security Advisory: gnupg2 security update

Bulletin has no description...

7.8CVSS5AI score0.00148EPSS
SaveExploits1References12
NVD
NVD
added 2026/01/22 8:16 a.m.14 views

CVE-2026-24332

Discord through 2026-01-16 allows gathering information about whether a user's client state is Invisible and not actually offline because the response to a WebSocket API request includes the user in the presences array with "status": "offline", whereas offline users are omitted from the presences...

4.3CVSS0.00276EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 8:10 a.m.6 views

CVE-2026-24332

Discord through 2026-01-16 allows gathering information about whether a user's client state is Invisible and not actually offline because the response to a WebSocket API request includes the user in the presences array with "status": "offline", whereas offline users are omitted from the presences...

4.3CVSS5.5AI score0.00276EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/01/22 6:57 a.m.11 views

GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write

A flaw was found in GnuPG. An attacker can provide crafted input to the armorfilter function, which incorrectly increments an index variable, leading to an out-of-bounds write. This memory corruption vulnerability may allow for information disclosure and could potentially lead to arbitrary code...

7.8CVSS6AI score0.00148EPSS
SaveExploits1References9
RedHat Linux
RedHat Linux
added 2026/01/22 6:57 a.m.18 views

Important: Red Hat Security Advisory: gnupg2 security update

An update for gnupg2 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as...

7.8CVSS7.6AI score0.00148EPSS
SaveExploits1References2
Packet Storm News
Packet Storm News
added 2026/01/22 12:00 a.m.15 views

Balancing Security and Privacy: The Pivotal Role of AI in Modern Healthcare Systems

As digital threats continue to grow, organizations must find ways to enhance security while protecting user privacy. This paper explores how artificial intelligence AI plays a crucial role in achieving this balance. AI technologies can improve security by detecting threats, monitoring systems, an...

5.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/01/22 12:00 a.m.34 views

PT-2026-3942

MacOS version of Inkscape bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the...

4.8CVSS5.7AI score0.00155EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/22 12:00 a.m.24 views

PT-2026-4076

Name of the Vulnerable Software and Affected Versions Ninja Team GDPR CCPA Compliance Support versions through 2.7.4 Description A missing authorization issue exists in Ninja Team GDPR CCPA Compliance Support ninja-gdpr-compliance, allowing exploitation of incorrectly configured access control...

5.3AI score0.00286EPSS
SaveExploits0References3
Rows per page
Query Builder