8280 matches found
PT-2025-38524
Name of the Vulnerable Software and Affected Versions Beyaz Computer CityPlus versions prior to 24.29375 Description A path traversal vulnerability exists in Beyaz Computer CityPlus. The vulnerability is due to improper limitation of a pathname to a restricted directory. This allows attackers to...
Apple macOS Tahoe sandbox under-limit vulnerability (CNVD-2025-22593)
Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...
PT-2025-38296
Name of the Vulnerable Software and Affected Versions CBIS/NCS Manager affected versions not specified Description The CBIS/NCS Manager API is susceptible to an authentication bypass. An unauthenticated user can gain unauthorized access to API functions by sending a specially crafted HTTP header...
Apple macOS Tahoe Permission Issues Vulnerability
Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...
Enalean Tuleap Community Edition和Enalean Tuleap Enterprise Edition 安全漏洞
Enalean Tuleap Community Edition and Enalean Tuleap Enterprise Edition are both an open source suite from Enalean Open Source designed to improve the management of software development and collaboration. A security vulnerability exists in Tuleap Community Edition version 16.11.99.1757427600 and...
Nokia CloudBand Infrastructure Software和Nokia Container Service 安全漏洞
Nokia CloudBand Infrastructure Software and Nokia Container Service are both products of the Finnish company Nokia.Nokia CloudBand Infrastructure Software is a platform that supports the virtualization of network functions. Nokia Container Service is a container management service. A security...
CVE-2025-43262
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. USB Restricted Mode may not be applied to accessories connected during boot...
Path Traversal
github.com/mattermost/mattermost-server is vulnerable to Path Traversal. The vulnerability is due to improper validation of file paths during plugin import operations, which allows an attacker with restricted admin privileges to install unauthorized custom plugins by bypassing plugin signature...
CVE-2025-43262
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. USB Restricted Mode may not be applied to accessories connected during boot...
CVE-2025-43262
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. USB Restricted Mode may not be applied to accessories connected during boot...
CVE-2025-31270
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. An app may be able to access protected user data...
CVE-2025-43262
A privilege issue exists in macOS Tahoe (versions prior to 26) due to insufficiently restricted permissions . This flaw could allow an attacker to exploit the system so that USB Restricted Mode is not correctly applied to accessories connected during the boot process. The issue has been addressed...
CVE-2025-43262
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. USB Restricted Mode may not be applied to accessories connected during boot...
CVE-2025-43262
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26. USB Restricted Mode may not be applied to accessories connected during boot...
Apple macOS Tahoe 安全漏洞
Apple macOS Tahoe is the 26th major release of Apple's macOS operating system, which was released on June 10, 2025, and features a new "Liquid Glass" visual design that significantly optimizes interface aesthetics, feature integration, and cross-device collaboration. The 26th major version of the...
PT-2025-37793
Name of the Vulnerable Software and Affected Versions: macOS versions prior to Tahoe 26 Description: A permissions issue existed due to insufficient restrictions. This allowed USB Restricted Mode to not be applied to accessories connected during boot. Recommendations: Update to macOS Tahoe 26...
PT-2025-37829
Name of the Vulnerable Software and Affected Versions: macOS versions prior to Tahoe 26 Description: A permissions issue allowed an app to access sensitive user data. This issue was addressed with additional restrictions. Recommendations: Update to macOS Tahoe 26 to resolve the issue...
The vulnerability of the integration IoT/SCADA platform Delta Industrial Automation DIALink, which stems from incorrect naming restrictions on paths leading to restricted-access catalogs, allows a perpetrator to execute arbitrary codes.
The vulnerability of the integration IoT/SCADA platform Delta Industrial Automation DIALink is related to an incorrect restriction on the path name to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
CVE-2025-23343
The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to write files to restricted components. A successful exploit of this vulnerability may lead to information disclosure, denial of service, and data tampering...