CVE-2024-37526

IBM Watson Query on Cloud Pak for Data IBM Data Virtualization 1.8, 2.0, 2.1, 2.2, and 3.0.0 could allow an authenticated user to obtain sensitive information from objects published using Watson Query due to an improper data protection mechanism...

CVE-2024-37526

The CVE-2024-37526 entry concerns IBM Watson Query on Cloud Pak for Data (IBM Data Virtualization) up to version 3.0.0. Affected products publish objects to catalogs where only the first N columns are governed (N = 100 in older CPD versions; 1000 in CPD 5.0.0), due to an improper data protection ...

CVE-2025-24101

CVE-2025-24101 affects macOS Sequoia 15.3 (Messages). The issue could allow an app to access user‑sensitive data due to insufficient redaction in certain data handling; Apple fixed it in macOS Sequoia 15.3 by improving redaction. No exploitation details are provided in the supplied documents.

CVE-2024-56972

An issue in Midea Group Co., Ltd Midea Home iOS 9.3.12 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56955

An issue in Tencent Technology Shenzhen Company Limited QQMail iOS 6.6.4 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56960

An issue in Tianjin Xiaowu Information technology Co., Ltd BeiKe Holdings iOS 1.3.50 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56954: URL Redirection to Untrusted Site

An issue in Beijing Baidu Netcom Science & Technology Co Ltd Haokan Video iOS 7.70.0 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56971

An issue in Zhiyuan Yuedu Guangzhou Literature Information Technology Co., Ltd Shuqi Novel iOS 5.3.8 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56967

An issue in Cloud Whale Interactive Technology LLC. PolyBuzz iOS 2.0.20 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56963

An issue in Beijing Sogou Technology Development Co., Ltd Sogou Input iOS 12.2.0 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56951

An issue in Hangzhou Bobo Technology Co Ltd UU Game Booster iOS 10.6.13 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56959

An issue in Mashang Consumer Finance Co., Ltd Anyihua iOS 3.6.2 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56960

An issue in Tianjin Xiaowu Information technology Co., Ltd BeiKe Holdings iOS 1.3.50 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56959

The Mashang Consumer Finance Co., Ltd Anyihua lending platform is vulnerable in iOS version 3.6.2 . An attacker can exploit this issue by supplying a crafted link to gain access to sensitive user information . This vulnerability is associated with CWE-601 (URL Redirection to Untrusted Site) and C...

CVE-2024-56966: URL Redirection to Untrusted Site

An issue in Shanghai Xuan Ting Entertainment Information & Technology Co., Ltd Qidian Reader iOS 5.9.384 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56963

The Sogou Input application for iOS 12.2.0 , developed by Beijing Sogou Technology Development Co., Ltd, is vulnerable to unauthorized access of sensitive user information. An attacker can exploit this by providing a manipulated or crafted link , which leads to the exposure of confidential data. ...

CVE-2024-56966

Shanghai Xuan Ting Entertainment Information & Technology Co., Ltd Qidian Reader iOS version 5.9.384 is vulnerable to an issue that allows attackers to access sensitive user information by supplying a crafted link . The vulnerability is associated with CWE-601 (URL Redirection to Untrusted Site) ...

CVE-2024-56957

Kingsoft Office Software Corporation Limited WPS Office iOS 12.20.0 is vulnerable to a security issue that allows an attacker to access sensitive user information by providing a crafted link . The vulnerability is associated with CWE-601 (URL Redirection to Untrusted Site) and CWE-922 (Insecure S...

CVE-2024-56947

Xiamen Meitu Technology Co., Ltd. BeautyCam for iOS version v12.3.60 is vulnerable to an issue that allows attackers to access sensitive user information by providing a crafted link . The vulnerability is associated with URL Redirection to Untrusted Site (CWE-601) and Insecure Storage of Sensitiv...

CVE-2024-56959: URL Redirection to Untrusted Site

An issue in Mashang Consumer Finance Co., Ltd Anyihua iOS 3.6.2 allows attackers to access sensitive user information via supplying a crafted link...