1615 matches found
CVE-2025-24130: Undefined Security Weakness
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to modify protected parts of the file system...
CVE-2024-54536: Undefined Security Weakness
The issue was addressed with improved validation of environment variables. This issue is fixed in macOS Sequoia 15.2. An app may be able to edit NVRAM variables...
CVE-2024-25034 IBM Planning Analytics file upload
IBM Planning Analytics 2.0 and 2.1 could be vulnerable to malicious file upload by not validating the type of file in the File Manager T1 process. Attackers can make use of this weakness and upload malicious executable files into the system that can be sent to victims for performing further attac...
CVE-2025-21550
...
CVE-2025-0066
Under certain conditions SAP NetWeaver AS for ABAP and ABAP Platform Internet Communication Framework allows an attacker to access restricted information due to weak access controls. This can have a significant impact on the confidentiality, integrity, and availability of an application...
CVE-2024-13310: Undefined Security Weakness
Vulnerability in Drupal Git Utilities for Drupal.This issue affects Git Utilities for Drupal:...
CVE-2024-13285: Undefined Security Weakness
Vulnerability in Drupal wkhtmltopdf.This issue affects wkhtmltopdf:...
CVE-2024-13311: Undefined Security Weakness
Vulnerability in Drupal Allow All File Extensions for file fields.This issue affects Allow All File Extensions for file fields:...
CVE-2024-13299: Undefined Security Weakness
Vulnerability in Drupal Megamenu Framework.This issue affects Megamenu Framework:...
CVE-2024-13300: Undefined Security Weakness
Vulnerability in Drupal Print Anything.This issue affects Print Anything:...
CVE-2024-56442: Undefined Security Weakness
Vulnerability of native APIs not being implemented in the NFC service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...
The vulnerability of the operating system for managing Synology Router Manager allows for cross-site scripting attacks, as a lack of security measures has been taken to protect the website structure. This vulnerability enables attackers to carry out cross-site scripting attacks.
The vulnerability of the Synology Router Manager operating system for managing network devices is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
CVE-2024-53144: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Align BR/EDR JUSTWORKS paring with LE This aligned BR/EDR JUSTWORKS method with LE which since 92516cd97fd4 "Bluetooth: Always request for user confirmation for Just Works" always request user confirmation wi...
CVE-2024-54474: Undefined Security Weakness
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to access user-sensitive data...
CVE-2024-11149: Undefined Security Weakness
In OpenBSD 7.4 before errata 014, vmm4 did not restore GDTR limits properly on Intel VMX CPUs...
CVE-2017-9711: Undefined Security Weakness
Certain unprivileged processes are able to perform IOCTL calls...
CVE-2024-8874
creationtimestamp| type| source ---|---|--- 2024-11-13 04:07:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113473672668247042 2024-11-13 04:07:16+00:00| seen| https://t.me/cvedetector/10770...
CVE-2024-50246: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add rough attr allocsize check...
CVE-2024-50242: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Additional check in ntfsfilerelease...
CVE-2024-9537: Undefined Security Weakness
ScienceLogic SL1 formerly EM7 is affected by an unspecified vulnerability involving an unspecified third-party component packaged with SL1. The vulnerability is addressed in SL1 versions 12.1.3+, 12.2.3+, and 12.3+. Remediations have been made available for all SL1 versions back to version lines...