2345 matches found
The vulnerability of the `ksmbd_crypt_message()` function in the `fs/smb/server/auth.c` module of the SMB server support in the Linux operating system allows a hacker to gain access to protected information.
The vulnerability of the ksmbdcryptmessage function in the fs/smb/server/auth.c module of the SMB server support in Linux operating systems is related to the absence of resetting of cryptographic data after its use. Exploiting this vulnerability can allow an attacker to gain access to protected...
The vulnerabilities of the Guest driver and Virtual GPU Manager drivers of NVIDIA graphics processors allow attackers to exploit them to disclose protected information.
The vulnerability of the Guest driver components and the Virtual GPU Manager driver of NVIDIA graphics processors is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the setRingtoneUri() function in the VoicemailNotificationSettingsUtil.java module of Android operating systems allows a hacker to disclose protected information.
The vulnerability of the setRingtoneUri function in the VoicemailNotificationSettingsUtil.java module of Android operating systems is related to the possibility of bypassing access control mechanisms. Exploiting this vulnerability could allow an attacker to disclose protected information...
The vulnerability of the ocr_begin_page function in software for processing, transforming, and generating documents using Ghostscript, which allows an attacker to compromise the integrity of protected information.
The vulnerability of the ocrbeginpage function in software for processing, transforming, and generating Ghostscript documents is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...
ROS-20250923-06
A vulnerability in the Apache Cassandra distributed database management system is related to improper privilege handling. Exploitation of the vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and availability of protected information. impact the...
The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer memory limit, allowing attackers to exploit this to disclose protected information.
The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading beyond the buffer memory boundary. Exploiting this vulnerability can allow attackers to disclose protected information by sending a specially created malicious file...
The vulnerability of the SALT.BOX software lies in the lack of protective measures for the SQL query structure, allowing attackers to gain unauthorized access to the protected information.
The vulnerability of the SALT.BOX software lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the WebPage rendering modules in WebKitGTK and WebKit, related to reading data beyond the allowed buffer limits, allows attackers to gain unauthorized access to protected information.
The vulnerability of WebPageView and WebKit modules relates to reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
CVE-2025-9808
The The Events Calendar plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.15.2 via the REST endpoint. This makes it possible for unauthenticated attackers to extract information about password-protected vendors or venues...
CVE-2025-43321
The issue was resolved by blocking unsigned services from launching on Intel Macs. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data...
CVE-2025-43369
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data...
CVE-2025-31268
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data...
CVE-2025-9808 The Events Calendar <= 6.15.2 - Missing Authorization to Unauthenticated Password-Protected Information Disclosure
The The Events Calendar plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.15.2 via the REST endpoint. This makes it possible for unauthenticated attackers to extract information about password-protected vendors or venues...
CVE-2025-43331
A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data...
CVE-2025-43311
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data...
CVE-2025-43311
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. An app may be able to access protected user data...
CVE-2025-43319
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. An app may be able to access protected user data...
CVE-2025-43285
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data...