2025

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, t

A script imports issue was addressed with improved isolation. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18

The issue was addressed with improved validation of environment variables. This issue is fixed in macOS Sequoia 15.4. An

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.

A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS So

This issue was addressed with improved handling of executable types. This issue is fixed in macOS Sequoia 15.4, macOS So

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Drupal core

A vulnerability, which was classified as critical, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an u

A vulnerability, which was classified as critical, has been found in TA-Lib up to 0.6.4. This issue affects the function

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Formatter S

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal RapiDoc OAS

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Link field

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Drupal AI (A

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Configuration Split allows Cross Site Request Forgery.This iss

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal SpamSpan fi

Cross-Site Request Forgery (CSRF) vulnerability in Drupal OAuth2 Client allows Cross Site Request Forgery.This issue aff

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Google Tag allows Cross Site Request Forgery.This issue affect

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Google Tag

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Matomo Analytics allows Cross Site Request Forgery.This issue

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Ignition Er

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Drupal core

Incorrect Authorization vulnerability in Drupal Drupal core allows Forceful Browsing.This issue affects Drupal core: fro

A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affect

A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3. This affects the functi

An E-RAB Release Command packet containing a malformed NAS PDU will cause the Athonet MME to immediately crash, potentia

A vulnerability classified as critical was found in Jinher Network OA C6. Affected by this vulnerability is an unknown f

Zitadel is open-source identity infrastructure software. ZITADEL administrators can enable a setting called "Ignoring un

A vulnerability classified as critical has been found in Novastar CX40 up to 2.44.0. Affected is the function system/pop

A vulnerability was found in Novastar CX40 up to 2.44.0. It has been rated as critical. This issue affects the function

Netty QUIC codec is a QUIC codec for netty which makes use of quiche. An issue was discovered in the codec. A hash colli

A vulnerability, which was classified as critical, was found in ESAFENET CDG 3. Affected is an unknown function of the f

Vite is a frontend tooling framework for javascript. Vite exposes content of non-allowed files using ?inline&import or ?

Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of perfor

Xorcom CompletePBX is vulnerable to a reflected cross-site scripting (XSS) in the administrative control panel. This

Xorcom CompletePBX is vulnerable to an authenticated path traversal, allowing for arbitrary file reads via the Backup an

After completing a build with AWS Serverless Application Model Command Line Interface (SAM CLI) which include symlinks,

When running the AWS Serverless Application Model Command Line Interface (SAM CLI) build process with Docker and symlink

A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstm_ce

Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker can access

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap allows cross-sit

OpenEMR is a free and open source electronic health records and medical practice management application. A stored XSS vu

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap does not enforce

OpenEMR is a free and open source electronic health records and medical practice management application. OpenEMR allows

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF

OpenEMR is a free and open source electronic health records and medical practice management application. The POST parame

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap has missing CSRF

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.8.0 and 3.1

A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The