Lucene search
+L

586 matches found

CVE
CVE
•added 2025/03/31 10:24 p.m.•91 views

CVE-2025-24262

A privacy issue in macOS allows a sandboxed app to potentially access sensitive user data stored within system logs. The root cause involves insufficient private data redaction for log entries. This vulnerability is addressed in macOS Sequoia 15.4 . No specific exploit details or links are provid...

5.5CVSS5.8AI score0.00256EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2025/03/31 10:23 p.m.•90 views

CVE-2025-30435

The macOS Sequoia 15.4 operating system is susceptible to an issue where a sandboxed app may be able to access sensitive user data stored within system logs . This vulnerability arises from insufficient redaction of sensitive information. The issue has been addressed in the macOS Sequoia 15.4 upd...

5.5CVSS5.8AI score0.0026EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2025/03/31 10:23 p.m.•31 views

CVE-2025-30435

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.4. A sandboxed app may be able to access sensitive user data in system logs...

0.0026EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/31 10:23 p.m.•16 views

CVE-2025-30435

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.4. A sandboxed app may be able to access sensitive user data in system logs...

6AI score0.0026EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•19 views

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems from the U.S. company Apple Apple developed specifically for Mac computers. A security vulnerability exists in Apple macOS Sequoia, which stems from a sandboxed application that may access sensitive user data in system logs...

5.5CVSS6.2AI score0.0026EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•1 views

CVE-2025-24262: Exposure of Sensitive Information to an Unauthorized Actor

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.4. A sandboxed app may be able to access sensitive user data in system logs...

5.5CVSS5.7AI score0.00256EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/31 12:00 a.m.•17 views

PT-2025-13970 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 Description: The issue allows a sandboxed app to potentially access sensitive user data in system logs. This is due to inadequate redaction of sensitive information. The estimated number of potentially affected...

5.5CVSS5.7AI score0.0026EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•4 views

CVE-2025-30435: Exposure of Sensitive Information to an Unauthorized Actor

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.4. A sandboxed app may be able to access sensitive user data in system logs...

5.5CVSS5.7AI score0.0026EPSS
SaveExploits0References1
Citrix
Citrix
•added 2025/03/21 12:00 a.m.•19 views

NetScaler -13.1 56.18 - Non-recoverable : potential damage: system hardware in jeopardy or damaged

The Citrix NetScaler SDX 16000 appliance may exhibit the following symptoms: The appliance reports critical voltage errors in the ns.log and system message logs, indicating potential hardware damage. Specific Log Entries: The following log entries, or similar variations, are observed: Mar 9...

7.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/02/18 12:00 a.m.•5 views

PT-2025-6739

Name of the Vulnerable Software and Affected Versions WombatDialer versions prior to 25.02 Description The issue is related to incorrect cookie session handling, which results in the full session identity being written to system logs. This could be used by a malicious attacker to impersonate an...

5.4CVSS0.00269EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/18 12:00 a.m.•6 views

CVE-2024-57056: Insufficient Session Expiration

Incorrect cookie session handling in WombatDialer before 25.02 results in the full session identity being written to system logs and could be used by a malicious attacker to impersonate an existing user session...

5.4CVSS5.8AI score0.00269EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/18 12:00 a.m.•61 views

CVE-2024-57056

WombatDialer versions prior to 25.02 are vulnerable to insufficient session expiration due to incorrect cookie session handling. This flaw causes the full session identity to be written to system logs, which a malicious attacker could exploit to impersonate an existing user session . To remediate...

5.4CVSS6.8AI score0.00269EPSS
SaveExploits0References1
zdt
zdt
•added 2025/02/15 12:00 a.m.•290 views

ABB Cylon FLXeon 9.3.4 cert.js System Logs Information Disclosure Vulnerability

ABB Cylon FLXeon version 9.3.4 has an issue where an authenticated attacker can access sensitive information via the system logs page of ABB Cylon FLXeon controllers. The logs expose critical data, including the OpenSSL password for stored certificates. This information can be leveraged for furth...

6.9CVSS6.8AI score0.02454EPSS
SaveExploits7
Zero Science Lab
Zero Science Lab
•added 2025/02/13 12:00 a.m.•371 views

ABB Cylon FLXeon 9.3.4 (cert.js) System Logs Information Disclosure

Summary BACnet® Smart Building Controllers. ABB's BACnet portfolio features a series of BACnet® IP and BACnet MS/TP field controllers for ASPECT® and INTEGRA™ building management solutions. ABB BACnet controllers are designed for intelligent control of HVAC equipment such as central plant, boiler...

9.4CVSS7.3AI score0.02454EPSS
SaveExploits7
Packet Storm
Packet Storm
•added 2025/02/13 12:00 a.m.•359 views

ABB Cylon FLXeon 9.3.4 cert.js System Logs Information Disclosure

ABB Cylon FLXeon version 9.3.4 has an issue where an authenticated attacker can access sensitive information via the system logs page of ABB Cylon FLXeon controllers. The logs expose critical data, including the OpenSSL password for stored certificates. This information can be leveraged for furth...

6.9CVSS6.8AI score0.02454EPSS
SaveExploits7
OSV
OSV
•added 2025/01/27 10:15 p.m.•11 views

CVE-2025-24145

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.3, iOS 18.3 and iPadOS 18.3. An app may be able to view a contact's phone number in system logs...

3.3CVSS7.3AI score0.00237EPSS
SaveExploits0References4
NVD
NVD
•added 2025/01/27 10:15 p.m.•22 views

CVE-2024-54550

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2. An app may be able to view autocompleted contact information from Messages and Mail in system logs...

4CVSS0.00185EPSS
SaveExploits0References2
OSV
OSV
•added 2025/01/27 10:15 p.m.•14 views

CVE-2024-54550

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2. An app may be able to view autocompleted contact information from Messages and Mail in system logs...

4CVSS5.7AI score0.00185EPSS
SaveExploits0References2
CVE
CVE
•added 2025/01/27 9:45 p.m.•111 views

CVE-2024-54550

A vulnerability in the Contacts component of iOS , iPadOS , and macOS systems allows an application to view autocompleted contact information from Messages and Mail within system logs. This issue was addressed by improving the redaction of sensitive information. The fix is available in iOS 18.2 ,...

4CVSS7AI score0.00185EPSS
SaveExploits0References2Affected Software3
Vulnrichment
Vulnrichment
•added 2025/01/27 9:45 p.m.•11 views

CVE-2024-54550

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2. An app may be able to view autocompleted contact information from Messages and Mail in system logs...

7.1AI score0.00185EPSS
SaveExploits0References2
Rows per page
Query Builder