WebKitGTK WebKit Buffer Overflow Info Disclosure

The vulnerability of WebPageView and WebKit modules relates to reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

SALT.BOX SQL Injection

The vulnerability of the SALT.BOX software lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Directum 5 Unauthenticated Access

The vulnerability of the Directum 5 electronic document management system lies in the inconsistency of responses to incoming requests. Exploiting this vulnerability could allow unauthorized actors to gain unauthorized access to protected information...

Poppler Heap Buffer Overflow Info Disclosure

The vulnerability of the cairodebugresetstaticdata function in the Poppler PDF rendering library is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

WPE WebKit XSS

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

Fortinet FortiClient Enterprise Management Server Path Traversal

The vulnerability of the Fortinet FortiClient Enterprise Management Server EMS and its cloud storage service, FortiClient EMS Cloud, exists due to a relative path traversal vulnerability in the download message. Exploiting this vulnerability allows an attacker to compromise the integrity of the...

remote management and monitoring Information Disclosure

The vulnerabilities of the software for remote management and monitoring of the Intel Converged Security and Manageability Engine CSME and the software for remote management and monitoring of the Intel Server Platform Services SPS are related to manipulating an unknown input, resulting in a timin...

Qualcomm Embedded Software Debug Message Unauthorized Access

The vulnerability of embedded Qualcomm software relates to the registration of debugging messages by eSE during log collection. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

CVE-2025-10015

The Sparkle framework includes an XPC service Downloader.xpc, by default this service is private to the application its bundled with. A local unprivileged attacker can register this XPC service globally which will inherit TCC permissions of the application. Lack of validation of connecting client...

CVE-2025-9808

The The Events Calendar plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.15.2 via the REST endpoint. This makes it possible for unauthenticated attackers to extract information about password-protected vendors or venues...

[SECURITY] Fedora 42 Update: lemonldap-ng-2.21.3-1.fc42

LemonLdap::NG is a modular Web-SSO based on Apache::Session modules. It simplifies the build of a protected area with a few changes in the application. It manages both authentication and authorization and provides headers for accounting. So you can have a full AAA protection for your web space as...

Tenda AX1803 getIptvInfo Function

The vulnerability of the getIptvInfo function in the microprogramming software for Tenda AX1803 arises from the operation that goes beyond the buffer in memory when processing the iptv.city.vlan parameter. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

TOTOLINK EX200 ExportSettings.sh Script Unauthorized Access

The vulnerability of the ExportSettings.sh /cgi-bin/ExportSettings.sh script of the TOTOLINK EX200 router software relates to bypassing authentication using a user-controlled key. Exploiting this vulnerability allows an attacker to circumvent security restrictions and gain unauthorized access to...

CVE-2025-43285

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-43321

The issue was resolved by blocking unsigned services from launching on Intel Macs. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-43311

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-43369

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-43291

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to modify protected parts of the file system...

CVE-2025-31269

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access protected user data...

CVE-2025-31270

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data...