Lucene search
+L

8770 matches found

RedhatCVE
RedhatCVE
added 2025/05/14 10:28 p.m.16 views

CVE-2025-24225

An injection issue was addressed with improved input validation. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. Processing an email may lead to user interface spoofing...

6.5CVSS5.9AI score0.00497EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/14 10:27 p.m.6 views

CVE-2025-31210

The issue was addressed with improved UI. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. Processing web content may lead to a denial-of-service...

6.5CVSS5.9AI score0.00531EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/05/14 12:0 a.m.16 views

Alibaba Cloud Linux 3 : 0045: webkit2gtk3 (ALINUX3-SA-2023:0045)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2023:0045 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-32886: A buffer overflow issue wa...

8.8CVSS8.1AI score0.34574EPSS
SaveExploits2References24
RedHat Linux
RedHat Linux
added 2025/05/13 4:5 p.m.4 views

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

9.1CVSS6.7AI score0.00609EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
added 2025/05/13 2:1 p.m.10 views

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

6.4CVSS6.9AI score0.00337EPSS
SaveExploits0References4
OSV
OSV
added 2025/05/13 12:0 a.m.16 views

ALSA-2025:7435 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: User Interface UI Misrepresentation of attachment URL CVE-2025-3523 thunderbird: Information Disclosure of /tmp directory listing CVE-2025-2830 thunderbird: Leak of hashed Window credentials via crafted...

6.4CVSS6.5AI score0.00337EPSS
SaveExploits0References8
Kaspersky
Kaspersky
added 2025/05/13 12:0 a.m.21 views

KLA83652 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to perform cross-site scripting attack, spoof user interface, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Cross-site...

7.5CVSS7.2AI score0.00408EPSS
SaveExploits0References3
NVD
NVD
added 2025/05/12 10:15 p.m.11 views

CVE-2025-31210

The issue was addressed with improved UI. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. Processing web content may lead to a denial-of-service...

6.5CVSS0.00531EPSS
SaveExploits0References4
NVD
NVD
added 2025/05/12 10:15 p.m.18 views

CVE-2025-24225

An injection issue was addressed with improved input validation. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. Processing an email may lead to user interface spoofing...

6.5CVSS0.00497EPSS
SaveExploits0References3
CVE
CVE
added 2025/05/12 9:42 p.m.56 views

CVE-2025-24225

CVE-2025-24225 is an injection issue in Apple’s mail-processing path that arises from insufficient input validation, potentially enabling user-interface spoofing when processing an email. The vulnerability affects iPadOS/iOS versions as noted: iPadOS 18.5 and iOS 18.5 (and iPadOS 17.7.7 also list...

6.5CVSS5.9AI score0.00497EPSS
SaveExploits0References3Affected Software2
Vulnrichment
Vulnrichment
added 2025/05/12 9:42 p.m.8 views

CVE-2025-24225

An injection issue was addressed with improved input validation. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. Processing an email may lead to user interface spoofing...

5.8AI score0.00497EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/05/12 9:42 p.m.23 views

CVE-2025-24225

An injection issue was addressed with improved input validation. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. Processing an email may lead to user interface spoofing...

0.00497EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/05/12 12:0 a.m.23 views

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS and Apple iPadOS that stems from insufficient input validation, which could...

6.5CVSS6.1AI score0.00497EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/05/12 12:0 a.m.9 views

AlmaLinux 8 : thunderbird (ALSA-2025:4649)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2025:4649 advisory. thunderbird: User Interface UI Misrepresentation of attachment URL CVE-2025-3523 thunderbird: Information Disclosure of /tmp directory listing CVE-2025-28...

6.4CVSS6.9AI score0.00337EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/05/12 12:0 a.m.6 views

PT-2025-20747 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iPadOS versions prior to 17.7.7 iOS versions prior to 18.5 iPadOS versions prior to 18.5 Description: An injection issue was addressed with improved input validation. Processing an email may lead to user interface spoofing. Recommendations: F...

6.5CVSS6AI score0.00497EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/05/11 12:0 a.m.6 views

Fedora 41 : deluge (2025-d23a07ad00)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-d23a07ad00 advisory. https://deluge.readthedocs.io/en/deluge-2.2.0/changelog.html 2.2.0 2025-04-28 Breaking changes Removed Python 3.6 support Python = 3.7 Core Fix GHSL-2024-189...

5.7AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/05/09 12:0 a.m.8 views

The vulnerability of the org.xwiki.platform:xwiki-platform-security-authentication-ui component of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability allows an attacker to gain unauthorized access to protected information.

The vulnerability of the “org.xwiki.platform:xwiki-platform-security-authentication-ui” component of the XWiki Platform involves the absence of authentication. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

9.7CVSS5.4AI score0.00549EPSS
SaveExploits0References4Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/07 2:31 p.m.11 views

CVE-2025-4316

Improper access control in PAM feature in Devolutions Server allows a PAM user to self approve their PAM requests even if disallowed by the configured policy via specific user interface actions. This issue affects Devolutions Server versions from 2025.1.3.0 through 2025.1.6.0, and all versions up...

4.3CVSS4.5AI score0.00358EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2025/05/07 12:59 p.m.10 views

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update ...

6.4CVSS6.9AI score0.00337EPSS
SaveExploits0References4
NVD
NVD
added 2025/05/07 9:15 a.m.35 views

CVE-2025-20975

Improper Export of Android Application Components in AODService prior to version 8.8.28.12 allows local attackers to launch arbitrary activity with systemui privilege...

5.5CVSS0.00136EPSS
SaveExploits0References1
Rows per page
Query Builder