PT-2025-37784

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sonoma 14.8 macOS versions prior to Tahoe 26 Description: A permissions issue allowed an app to potentially access protected user data. This issue was addressed with additional restrictions. Recommendations: Update to...

PT-2025-37817

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sequoia 15.7 macOS versions prior to Sonoma 14.8 macOS versions prior to Tahoe 26 Description: An application may be able to access protected user data due to missing entitlement checks. Recommendations: Update to macO...

Apple macOS Sonoma和Apple macOS Tahoe 安全漏洞

Apple macOS Sonoma and Apple macOS Tahoe are operating systems from Apple Inc. A security vulnerability exists in Apple macOS Sonoma prior to version 14.8 and Apple macOS Tahoe prior to version 26, which stems from insufficient privilege limitations and could cause an application to access...

PT-2025-85: Insufficient access control in Fastwel PLC web server

The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. Exploitation of the vulnerability allows an attacker with an unprivileged account to gain the access to protected information. Vulnerability status: Confirmed by vendor Date of...

The vulnerability of the InterpretImageFilename function in the console-based image editing tool ImageMagick allows a hacker to gain unauthorized access to protected information.

The vulnerability of the InterpretImageFilename function in the console-based image editing tool ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2023-21483

Improper Access Control vulnerability in Galaxy Store prior to version 4.5.53.6 allows local attacker to access protected data using exported service...

CVE-2023-21483

Improper Access Control vulnerability in Galaxy Store prior to version 4.5.53.6 allows local attacker to access protected data using exported service...

CVE-2023-21478

Improper input validation vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data...

CVE-2023-21483

Improper Access Control vulnerability in Galaxy Store prior to version 4.5.53.6 allows local attacker to access protected data using exported service...

CVE-2023-21483

Improper Access Control vulnerability in Galaxy Store prior to version 4.5.53.6 allows local attacker to access protected data using exported service...

CVE-2023-21483

CVE-2023-21483 concerns Samsung Galaxy Store prior to 4.5.53.6 with an improper access control flaw that lets a local attacker access protected data via an exported service. Affected component: Galaxy Store (mobile app). Root cause: improper access control enabling data exposure without remote ex...

CVE-2023-21478

CVE-2023-21478 affects the TIGERF trustlet prior to SMR Apr-2023 Release 1. The vulnerability is due to improper input validation and could allow local attackers to access protected data. Affected component is the TIGERF trustlet; impact is exposure of data to a local attacker. Public exploit det...

CVE-2023-21478

Improper input validation vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data...

CVE-2023-21477

Access of Memory Location After End of Buffer vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data...

CVE-2023-21477

The CVE-2023-21477 issue affects the TIGERF trustlet in Samsung Mobile devices, where an Access of Memory Location After End of Buffer vulnerability within the trustlet allows a local attacker to access protected data. Affected component: TIGERF trustlet; affected versions: prior to SMR Apr-2023 ...

PT-2025-35670

Name of the Vulnerable Software and Affected Versions: TIGERF trustlet versions prior to SMR Apr-2023 Release 1 Description: An improper input validation issue exists in the TIGERF trustlet, potentially allowing local attackers to access protected data. Recommendations: Update to SMR Apr-2023...

PT-2025-35675

Name of the Vulnerable Software and Affected Versions: Galaxy Store versions prior to 4.5.53.6 Description: An improper access control issue exists in Galaxy Store. A local attacker can access protected data by exploiting an exported service. Recommendations: Update Galaxy Store to version 4.5.53...

PT-2025-35669

Name of the Vulnerable Software and Affected Versions TIGERF trustlet versions prior to SMR Apr-2023 Release 1 Description An Access of Memory Location After End of Buffer issue exists in the TIGERF trustlet. This allows local attackers to access protected data. Recommendations Update to SMR...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Apr-2023 Release 1, which stems from improper input validation and could allo...

ROS-20250827-03

A vulnerability in the resolveFile method of the Apache Commons VFS Virtual File System unified API for accessing different file systems is due to errors in the relative path handling of the directory when processing the relative path of the directory. Virtual File System method is related to...