2025

In RGXMMUCacheInvalidate of rgxmem.c, there is a possible arbitrary code execution due to a race condition. This could l

Avi Load Balancer contains an unauthenticated blind SQL Injection vulnerability which was privately reported to VMware.

A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all nam

An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permissi

In TdlsexRxFrameHandle of the MTK WLAN driver, there is a possible out of bounds write due to a missing bounds check. Th

In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. The file upload fea

Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. The external storag

Improper Neutralization of Argument Delimiters in the TeamViewer_service.exe component of TeamViewer Clients prior versi

A flaw was found in OpenShift Service Mesh 2.6.3 and 2.5.6. Rate-limiter avoidance, access-control bypass, CPU and memor

The WS Form LITE and PRO plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the url parameter in al

The Eventer plugin for WordPress is vulnerable to SQL Injection via the 'event' parameter in the 'eventer_get_attendees'

NVIDIA GPU display driver for Windows and Linux contains a vulnerability where data is written past the end or before th

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause memory cor

NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could le

NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could le

Using ParsePKCS1PrivateKey to parse a RSA key that is missing the CRT values would panic when verifying that the key is

Credentials provided via the new GOAUTH feature were not being properly segmented by domain, allowing a malicious server

When logs are written to a widely-writable directory (the default), an unprivileged attacker may predict a privileged pr

CMSimple 5.16 allows the user to read cms source code through manipulation of the file name in the file parameter of a G

Insecure Permissions vulnerability in CMSimple v.5.16 allows a remote attacker to obtain sensitive information via a cra

An issue in CMSimple v.5.16 allows a remote attacker to obtain sensitive information via a crafted script to the validat

Cross Site Request Forgery (CSRF) vulnerability in LifestyleStore v1.0 allows a remote attacker to execute unauthorized

In AXESS ACS (Auto Configuration Server) through 5.2.0, unsanitized user input in the TR069 API allows remote unauthenti

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.3 and iPadOS 18.3

A permissions issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Vent

A logging issue was addressed with improved data redaction. This issue is fixed in Safari 18.3, macOS Sequoia 15.3. A ma

A validation issue was addressed with improved logic. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, ma

An integer overflow was addressed through improved input validation. This issue is fixed in macOS Sequoia 15.3, macOS So

A privacy issue was addressed with improved handling of files. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 1

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.

This issue was addressed with improved message validation. This issue is fixed in macOS Sequoia 15.3. An app may be able

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoi

An input validation issue was addressed. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, macOS Sono

This issue was addressed by improved management of object lifetimes. This issue is fixed in macOS Sequoia 15.3, macOS So

The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15.3, macOS S

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS S

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2,

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, iPa

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.2, ma

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.2 and iPadOS 18.2, m

The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, iPadOS 17.7.3, macOS Sequ

Cacti is an open source performance and fault management framework. Some of the data stored in automation_tree_rules.php

Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation

vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Attacker can o

vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Attacker with