Lucene search
+L

8043 matches found

CNNVD
CNNVD
•added 2025/11/04 12:00 a.m.•18 views

CanalDenuncia App 安全漏洞

CanalDenuncia App is a reporting channel application from the Spanish company CanalDenuncia. A security vulnerability exists in CanalDenuncia App, which stems from a lack of authorization checking, which allows an attacker to access other user information by sending a POST request to the paramete...

8.7CVSS6.4AI score0.00322EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/04 12:00 a.m.•21 views

PT-2025-45007

Name of the Vulnerable Software and Affected Versions CanalDenuncia.app affected versions not specified Description A lack of authorization exists in CanalDenuncia.app. An attacker can access other users' information by sending a POST request through the id user parameter in the...

8.7CVSS6.5AI score0.00296EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/11/04 12:00 a.m.•20 views

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems from the U.S.-based Apple Inc. developed specifically for Mac computers. A security vulnerability exists in Apple macOS Sonoma prior to 14.8.2 and Sequoia prior to 15.7.2, which stems from an application that may access sensitive user data...

5.5CVSS6.2AI score0.00212EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/11/04 12:00 a.m.•23 views

PT-2025-44997

Name of the Vulnerable Software and Affected Versions CanalDenuncia.app affected versions not specified Description A lack of authorization exists in CanalDenuncia.app, potentially allowing an attacker to access other users' information. This is achieved by sending a POST request through the id...

8.7CVSS6.4AI score0.00296EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/11/04 12:00 a.m.•19 views

CanalDenuncia App 安全漏洞

CanalDenuncia App is a reporting channel application from the Spanish company CanalDenuncia. A security vulnerability exists in CanalDenuncia App, which stems from a lack of authorization checking, which allows an attacker to send a POST request to access other user information via the parameter...

8.7CVSS6.5AI score0.00296EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/04 12:00 a.m.•20 views

Apple macOS 安全漏洞

ch is a ClickHouse open source low-level Go client for ClickHouse. A security vulnerability exists in Apple macOS Sonoma prior to 14.8.2 and Sequoia prior to 15.7.2, which stems from insufficient privilege checking and could result in access to sensitive user data...

5.5CVSS6.2AI score0.00188EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/11/04 12:00 a.m.•25 views

PT-2025-45004

Name of the Vulnerable Software and Affected Versions CanalDenuncia.app affected versions not specified Description A lack of authorization exists in CanalDenuncia.app. An attacker can access other users' information by sending a POST request through the id sociedad parameter in the...

8.7CVSS6.5AI score0.00296EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/11/04 12:00 a.m.•20 views

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma prior to 14.8.2 and Sequoia prior to 15.7.2, which stems from insufficient privilege checking and could result in access to...

5.5CVSS6.1AI score0.00212EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/11/04 12:00 a.m.•12 views

CanalDenuncia App 安全漏洞

CanalDenuncia App is a reporting channel application from the Spanish company CanalDenuncia. A security vulnerability exists in CanalDenuncia App, which stems from a lack of authorization checking, which allows an attacker to access other users' information by sending a POST request containing th...

8.7CVSS6.5AI score0.00296EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/04 12:00 a.m.•3 views

CVE-2025-43396: Improper Access Control

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. A sandboxed app may be able to access sensitive user data...

5.5CVSS6.6AI score0.00198EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/04 12:00 a.m.•3 views

CVE-2025-43394: Improper Link Resolution Before File Access

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access protected user data...

5.5CVSS5.8AI score0.00247EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/04 12:00 a.m.•3 views

CVE-2025-43420: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition was addressed with improved state handling. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access sensitive user data...

4.7CVSS6.6AI score0.00141EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/04 12:00 a.m.•4 views

CVE-2025-43395: Improper Link Resolution Before File Access

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access protected user data...

3.3CVSS6.7AI score0.0022EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/04 12:00 a.m.•2 views

CVE-2025-43498: Improper Access Control

An authorization issue was addressed with improved state management. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, visionOS 26.1. An app may be able to access sensitive user data...

5.5CVSS6.6AI score0.00196EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/03 12:00 a.m.•10 views

PT-2025-44900

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 Description A permissions issue existed that allowed an application to potentially access sensitive user data. This issue was addressed through the implementation of...

5.5CVSS6.4AI score0.00209EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/11/03 12:00 a.m.•11 views

PT-2025-50994

Name of the Vulnerable Software and Affected Versions macOS Sonoma versions prior to 14.8.3 macOS Tahoe versions prior to 26.1 macOS Sequoia versions prior to 15.7.3 Description A flaw exists in how the operating system parses directory paths. This could allow an application to access sensitive...

5.5CVSS6.4AI score0.00216EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/11/03 12:00 a.m.•8 views

PT-2025-44847

Name of the Vulnerable Software and Affected Versions macOS versions prior to 14.8.2 macOS versions prior to 15.7.2 Description A permissions issue existed due to insufficient sandbox restrictions, potentially allowing an application to access user-sensitive data. Recommendations Update to macOS...

7.5CVSS6.7AI score0.00591EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/11/03 12:00 a.m.•18 views

PT-2025-44862

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.1 iPadOS versions prior to 26.1 Description A flaw exists due to insufficient data redaction in logging mechanisms. This could allow an application to access sensitive user data. Recommendations Update to iOS version...

5.5CVSS6.2AI score0.00273EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/11/03 12:00 a.m.•14 views

PT-2025-44856

Name of the Vulnerable Software and Affected Versions macOS versions prior to Sonoma 14.8.2 macOS versions prior to Sequoia 15.7.2 Description A race condition existed due to improper state handling, potentially allowing an application to access sensitive user data. Recommendations Update to macO...

4.7CVSS6.5AI score0.00141EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/11/03 12:00 a.m.•18 views

PT-2025-44851

Name of the Vulnerable Software and Affected Versions macOS versions prior to 14.8.2 macOS versions prior to 15.7.2 Description An application may be able to access user-sensitive data due to insufficient entitlement checks. The issue was resolved by implementing additional entitlement checks...

5.5CVSS6.6AI score0.0021EPSS
SaveExploits0References5
Rows per page
Query Builder