CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

379 matches found

cve•added 2025/12/03 12:0 a.m.•13 views

CVE-2025-65842

CVE-2025-65842 concerns the Aquarius HelperTool (1.0.003) on macOS. The Privileged XPC service accepts local connections without validating the client’s identity, and its authorization logic calls AuthorizationCopyRights with a NULL reference, causing all authorization checks to succeed. The exec...

5.1CVSS6.7AI score0.00146EPSS

Exploits1References1Affected Software1

cnnvd•added 2025/12/03 12:0 a.m.•7 views

Plugin Alliance Installation Manager 安全漏洞

Plugin Alliance Installation Manager is a plugin manager from US-based Plugin Alliance. A security vulnerability exists in Plugin Alliance Installation Manager version v1.4.0 that originates when the InstallationHelper service accepts an unauthenticated XPC connection, which could lead to the...

6.2CVSS6.9AI score0.00183EPSS

Exploits1References1

ptsecurity•added 2025/12/03 12:0 a.m.•5 views

PT-2025-48967

The Aquarius HelperTool 1.0.003 privileged XPC service on macOS contains multiple flaws that allow local privilege escalation. The service accepts XPC connections from any local process without validating the client's identity, and its authorization logic incorrectly calls AuthorizationCopyRights...

7.1AI score0.00146EPSS

Exploits1References2

redhatcve•added 2025/11/26 4:56 p.m.•5 views

CVE-2025-11921

iStats contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via command injection.This issue affects iStats: 7.10.4...

8.5CVSS7.3AI score0.0056EPSS

Exploits0References1

nvd•added 2025/11/24 3:15 p.m.•6 views

CVE-2025-11921

iStats contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via command injection.This issue affects iStats: 7.10.4...

8.5CVSS0.0056EPSS

Exploits0References3

ptsecurity•added 2025/11/24 12:0 a.m.•9 views

PT-2025-47919

iStats contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via command injection.This issue affects iStats: 7.10.4...

9.3CVSS7.3AI score0.0056EPSS

Exploits0References4