2025

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4. An app may be able to

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.4, macOS

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequo

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 1

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 1

This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4

A vulnerability was found in chshcms mccms 2.7. It has been declared as critical. This vulnerability affects the functio

A vulnerability was found in chshcms mccms 2.7. It has been classified as critical. This affects the function index of t

A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0 and classified as cr

A vulnerability has been found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0 and classified

Esri Portal for ArcGIS 11.4 and prior allows a remote, unauthenticated attacker to bypass the Portal’s SSRF protections.

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.13.8, 2.14.13, and 3.0.4,

Discourse Policy plugin gives the ability to confirm users have seen or done something. Prior to version 0.1.1, if there

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is v

MikroTik RouterOS 6.40.5, the SMB service contains a memory corruption vulnerability. Remote, unauthenticated attackers

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9 and 12.

A vulnerability, which was classified as problematic, was found in TechPowerUp GPU-Z 2.23.0. Affected is the function su

Deserialization of Untrusted Data vulnerability in ThimPress Course Builder course-builder allows Object Injection.This

Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of

Dell ThinOS 2502 and prior contain a Cleartext Storage of Sensitive Information vulnerability. A high privileged attacke

A vulnerability, which was classified as problematic, has been found in fossasia open-event-server 1.19.1. This issue af

openmrs-module-fhir2 provides the FHIR REST API and related services for OpenMRS, an open medical records system. In ver

Buffer Overflow vulnerability in Free5gc v.4.0.0 allows a remote attacker to cause a denial of service via the AMF, NGAP

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to cause a Denial of Service (DoS) via supplying crafte

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the System does not provide a ch

vLLM is an inference and serving engine for large language models (LLMs). In versions starting from 0.7.0 to before 0.9.

vLLM is an inference and serving engine for large language models (LLMs). Prior to version 0.9.0, when a new prompt is p

An issue in OpenKnowledgeMaps Headstart v7 allows a remote attacker to escalate privileges via the url parameter of the

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the application incorrectly chec

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.179, when creating a conversation fro

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.179, there is no check to ensure that

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.179, the application does not check o

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.178, FreeScout is vulnerable to code

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.178, FreeScout is vulnerable to deser

maccms10 v2025.1000.4047 is vulnerable to Server-side request forgery (SSRF) in Email Settings.

Mattermost versions 10.7.x <= 10.7.0, 10.6.x <= 10.6.2, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fail to properly validate pe

Exposure of private personal information to an unauthorized actor in the user vaults component of Devolutions Remote Des

A vulnerability classified as critical was found in aimhubio aim up to 3.29.1. This vulnerability affects the function R

Use of entitlement "com.apple.security.cs.disable-library-validation" and lack of launch and library load constraints al

Netwrix Directory Manager (formerly Imanami GroupID) through v.10.0.7784.0 has a hard-coded password.

tcpreplay v4.4.4 was discovered to contain an infinite loop via the tcprewrite function at get.c.

yasm commit 9defefae was discovered to contain a NULL pointer dereference via the yasm_section_bcs_append function at se

A vulnerability classified as problematic has been found in gradio-app gradio up to 5.29.1. This affects the function is

HuoCMS V3.5.1 has a File Upload Vulnerability. An attacker can exploit this flaw to bypass whitelist restrictions and cr

HuoCMS V3.5.1 and before is vulnerable to file upload, which allows attackers to take control of the target server

In the Linux kernel, the following vulnerability has been resolved: fs/erofs/fileio: call erofs_onlinefolio_split() aft

In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix unsafe attribute parsing in output