2025

SAP S/4HANA Cloud Private Edition or on Premise (SCM Master Data Layer (MDL)) allows an authenticated attacker with SAP

Under certain conditions Promotion Management Wizard (PMW) allows an attacker to access information which would otherwis

The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) allows an unauthenticated attacker to submit an a

A privacy issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5, macOS Sequoia 15.7, macOS

This issue was addressed through improved state management. This issue is fixed in iOS 18.5 and iPadOS 18.5. Muting the

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5. An app may be able to acces

A logic issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.6. C

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.5. An app may be

This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ven

The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoi

This issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ven

The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.5 and iPadOS 18.5, macOS Sequoia

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 18.5 and iPadOS 18.5. Call history

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS

The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoi

A correctness issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, macOS Sequoia 1

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadO

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, m

This issue was addressed through improved state management. This issue is fixed in iOS 18.5 and iPadOS 18.5. An attacker

A logging issue was addressed with improved data redaction. This issue is fixed in iPadOS 17.7.7, macOS Sequoia 15.5, ma

The issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequ

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5. An app may be able to

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, mac

The issue was addressed with additional permissions checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7

The issue was addressed with improved input sanitization. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.6

An input validation issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.5, macO

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, mac

Client RCE on macOS and Linux via improper symbolic link resolution in Google Web Designer's preview feature

A directory traversal vulnerability was discovered in Pagure server. If a malicious user submits a specially cratfted gi

A vulnerability was discovered in Pagure server. If a malicious user were to submit a git repository with symbolic links

An authenticated user without user administrative permissions could change the administrator Account Name.

An unauthenticated user could discover account credentials via a brute-force attack without rate limiting

IBM 4769 Developers Toolkit 7.0.0 through 7.5.52 could allow a remote attacker to cause a denial of service in the Hardw

SEL-5037 Grid Configurator contains an overly permissive Cross Origin Resource Sharing (CORS) configuration for a data g

ARTEC EMA Mail 6.92 allows CSRF.

A null pointer dereference vulnerability was discovered in Netis WF2880 v2.1.40207. The vulnerability exists in the FUN_

nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus a

EspoCRM is a free, open-source customer relationship management platform. Prior to version 9.0.8, HTML Injection in Know

An unauthenticated remote attacker can cause a buffer overflow which could lead to unexpected behaviour or DoS via Bluet

The KFOX from KingFor has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privilege to up

A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been classified as critical. Th

A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. Affected by

A vulnerability, which was classified as critical, has been found in PHPGurukul Apartment Visitors Management System 1.0

A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. This vulnerability affect

A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. This affects an unkn

A vulnerability, which was classified as critical, was found in LyLme Spage 2.1. This affects an unknown part of the fil

A vulnerability was found in MTSoftware C-Lodop 6.6.1.1 on Windows. It has been rated as critical. This issue affects so