15021 matches found
Apple macOS security vulnerabilities
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS that originates from an application that may access protected user data. The following versions are affected: macOS Sequoia prior ...
Apple macOS security vulnerabilities
Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS that stems from a permissions issue that could cause an application to modify a protected portion of the file system. The followin...
PT-2025-37798
Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8 macOS versions prior to Sequoia 15.7 macOS Tahoe versions prior to 26 Description A permissions issue existed where an application could potentially access protected user data. This was addressed by...
PT-2025-37801
Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8 macOS versions prior to Sequoia 15.7 macOS Tahoe version 26 Description A permissions issue existed where an application could potentially modify protected areas of the file system. The issue was resolved by...
Amazon Linux 2023 : mod_auth_openidc (ALAS2023-2025-1188)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1188 advisory. modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior to 2.4.16.11, a bug in...
CVE-2025-43369: Improper Access Control
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data...
Apple macOS Tahoe security vulnerabilities
Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...
Apache 2.x HTTP Server Mod_auth_openidc Information Disclosure
The vulnerability of the authentication and authorization module for the Apache 2.x HTTP server, Modauthopenidc, is related to the disclosure of information. Exploiting this vulnerability allows a malicious actor to disclose the protected information...
Oracle Java SE Compiler Unauthenticated Access
The vulnerability of the Compiler component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine is related to access control deficiencies. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected...
Windows Imaging Component Disclosure
The vulnerability of the Windows Imaging Component WIC framework in Windows operating systems is related to the use of uninitialized resources. Exploiting this vulnerability can allow an attacker to disclose protected information...
Microsoft Word Office Suites Microsoft 365 Apps Disclosure
The vulnerability of Microsoft Word, the Microsoft Office suite, and Microsoft 365 Apps for Enterprise is related to the misuse of a non-trusted pointer. Exploiting this vulnerability can allow an attacker to disclose protected information...
CVE-2025-9034
The Wp Edit Password Protected WordPress plugin before 1.3.5 does not validate a parameter before redirecting the user to its value, leading to an Open Redirect issue...
Security update for the Linux Kernel (Live Patch 23 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-1505005594 fixes several issues. The following security issues were fixed: CVE-2025-21999: proc: fix UAF in procgetinode bsc1242579. CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF bsc1237930. CVE-2025-38001: netsched: hfsc: Address reentrant...
GitLab Access Control Unauthorized Access
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Windows kernel Unauthorized Access
The vulnerability of Windows operating system kernels is related to deficiencies in the mechanism for generating error reports. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
ROS-20250912-09
Vulnerability in the implementation of the CORS mechanism of the Python PyPi language software product repository is related to access control flaws. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information. remotely to disclose protected...
WordPress Wp Edit Password Protected plugin < 1.3.5 - Open Redirect vulnerability
Open Redirect vulnerability discovered by Bob Matyas in WordPress Plugin Wp Edit Password Protected – Create Member/User Only Page & Design Password Protected Form versions 1.3.5...
Security update for kernel-livepatch-MICRO-6-0_Update_2
This update for kernel-livepatch-MICRO-6-0Update2 fixes the following issues: CVE-2025-38087: net/sched: fix use-after-free in tapriodevnotifier bsc1245505 CVE-2025-21999: proc: fix UAF in procgetinode bsc1242579 CVE-2025-38001: netsched: hfsc: Address reentrant enqueue adding class to eltree twi...
CVE-2025-8007
A security issue exists in the protected mode of 1756-EN4TR and 1756-EN2TR communication modules, where a Concurrent Forward Close operation can trigger a Major Non-Recoverable MNFR fault. This condition may lead to unexpected system crashes and loss of device availability...