[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities
📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 424014
> CVE-2025-3059 [MEDIUM 5.3]
[PUBLISHED: 2025-03-31] [EPSS 0.46%]
Vulnerability in Drupal Profile Private.This issue affects Profile Private: *.*.
AFFECTED_PRODUCTS: Profile Private Project Profile Private
> CVE-2025-3040 [MEDIUM 6.3]
[PUBLISHED: 2025-03-31] [EPSS 0.65%]
A vulnerability was found in Project Worlds Online Time Table Generator 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add_student.php. The manipulation of the argument pic leads to unrestricted upload. The attack may be launched remotely....
AFFECTED_PRODUCTS: Projectworlds Online Time Table Generator
> CVE-2025-3039 [MEDIUM 6.3]
[PUBLISHED: 2025-03-31] [EPSS 0.68%]
A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /add_employee.php. The manipulation of the argument lname/fname leads to sql injection. It is possible to launch the attack remotely. The exploit...
AFFECTED_PRODUCTS: Fabian Payroll Management System
> CVE-2025-3038 [MEDIUM 6.3]
[PUBLISHED: 2025-03-31] [EPSS 0.68%]
A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view_account.php. The manipulation of the argument salary_rate leads to sql injection. The attack may be initiated remotely. The exploit has be...
AFFECTED_PRODUCTS: Fabian Payroll Management System
> CVE-2025-3037 [MEDIUM 4.3]
[PUBLISHED: 2025-03-31] [EPSS 0.30%]
A vulnerability has been found in yzk2356911358 StudentServlet-JSP cc0cdce25fbe43b6c58b60a77a2c85f52d2102f5/d4d7a0643f1dae908a4831206f2714b21820f991 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiat...
> CVE-2025-31194 [CRITICAL 9.8]
[PUBLISHED: 2025-03-31] [EPSS 1.03%]
An authentication issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A Shortcut may run with admin privileges without authentication.
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple macOS
> CVE-2025-31192 [MEDIUM 6.7]
[PUBLISHED: 2025-03-31] [EPSS 0.59%]
The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A website may be able to access sensor information without user consent.
AFFECTED_PRODUCTS: Apple macOS, Apple Safari, Apple Iphone Os ... (+1)
> CVE-2025-31191 [MEDIUM 5.5]
[PUBLISHED: 2025-03-31] [EPSS 0.47%]
This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access sensitive user data.
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple macOS ... (+3)
> CVE-2025-31188 [HIGH 7.8]
[PUBLISHED: 2025-03-31] [EPSS 0.22%]
A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to bypass Privacy preferences.
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple macOS
> CVE-2025-31187 [MEDIUM 5.5]
[PUBLISHED: 2025-03-31] [EPSS 0.26%]
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to modify protected parts of the file system.
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple macOS
> CVE-2025-31184 [HIGH 7.8]
[PUBLISHED: 2025-03-31] [EPSS 0.26%]
This issue was addressed with improved permissions checking. This issue is fixed in Safari 18.4, visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may gain unauthorized access to Local Network.
AFFECTED_PRODUCTS: Apple macOS, Apple Safari, Apple Iphone Os ... (+2)
> CVE-2025-31183 [CRITICAL 9.8]
[PUBLISHED: 2025-03-31] [EPSS 1.23%]
The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple Iphone Os ... (+2)
> CVE-2025-31182 [CRITICAL 9.8]
[PUBLISHED: 2025-03-31] [EPSS 1.26%]
This issue was addressed with improved handling of symlinks. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to delete files for which it does not have permission.
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple Iphone Os ... (+3)
> CVE-2025-30471 [HIGH 7.5]
[PUBLISHED: 2025-03-31] [EPSS 1.50%]
A validation issue was addressed with improved logic. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A remote user may be able to cause a denial-of-service.
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple macOS ... (+4)
> CVE-2025-30470 [MEDIUM 5.5]
[PUBLISHED: 2025-03-31] [EPSS 0.34%]
A path handling issue was addressed with improved logic. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to read sensitive location information.
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple macOS ... (+3)
> CVE-2025-30469 [LOW 2.4]
[PUBLISHED: 2025-03-31] [EPSS 0.27%]
This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4. A person with physical access to an iOS device may be able to access photos from the lock screen.
AFFECTED_PRODUCTS: Apple Iphone Os, Apple Ipados
> CVE-2025-30467 [MEDIUM 4.3]
[PUBLISHED: 2025-03-31] [EPSS 0.54%]
The issue was addressed with improved checks. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Visiting a malicious website may lead to address bar spoofing.
AFFECTED_PRODUCTS: Apple macOS, Apple Safari, Apple Iphone Os ... (+1)
> CVE-2025-30465 [CRITICAL 9.8]
[PUBLISHED: 2025-03-31] [EPSS 1.08%]
A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app.
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple macOS ... (+1)
> CVE-2025-30464 [HIGH 7.8]
[PUBLISHED: 2025-03-31] [EPSS 0.29%]
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to cause unexpected system termination or corrupt kernel memory.
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple macOS
> CVE-2025-30463 [MEDIUM 5.5]
[PUBLISHED: 2025-03-31] [EPSS 0.27%]
The issue was addressed with improved restriction of data container access. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.
AFFECTED_PRODUCTS: Apple macOS, Apple Iphone Os, Apple Ipados
> CVE-2025-30462 [CRITICAL 9.8]
[PUBLISHED: 2025-03-31] [EPSS 0.89%]
A library injection issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Apps that appear to use App Sandbox may be able to launch without restrictions.
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple macOS
> CVE-2025-30461 [CRITICAL 9.8]
[PUBLISHED: 2025-03-31] [EPSS 0.68%]
An access issue was addressed with additional sandbox restrictions on the system pasteboards. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data.
AFFECTED_PRODUCTS: Apple macOS
> CVE-2025-30460 [HIGH 7.4]
[PUBLISHED: 2025-03-31] [EPSS 0.77%]
A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access protected user data.
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple macOS
> CVE-2025-30458 [CRITICAL 9.8]
[PUBLISHED: 2025-03-31] [EPSS 0.76%]
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4. An app may be able to read files outside of its sandbox.
AFFECTED_PRODUCTS: Apple macOS
> CVE-2025-30457 [CRITICAL 9.8]
[PUBLISHED: 2025-03-31] [EPSS 1.24%]
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to create symlinks to protected regions of the disk.
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple macOS
> CVE-2025-30456 [HIGH 7.8]
[PUBLISHED: 2025-03-31] [EPSS 1.00%]
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to gain root privileges.
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple macOS ... (+2)
> CVE-2025-30455 [MEDIUM 5.5]
[PUBLISHED: 2025-03-31] [EPSS 0.26%]
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to access private information.
AFFECTED_PRODUCTS: Apple macOS, Apple macOS
> CVE-2025-30454 [MEDIUM 5.5]
[PUBLISHED: 2025-03-31] [EPSS 0.30%]
A path handling issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. A malicious app may be able to access private information.
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple Iphone Os ... (+2)
> CVE-2025-30452 [CRITICAL 9.8]
[PUBLISHED: 2025-03-31] [EPSS 1.14%]
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An input validation issue was addressed.
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple macOS
> CVE-2025-30451 [MEDIUM 5.5]
[PUBLISHED: 2025-03-31] [EPSS 0.24%]
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.4. An app may be able to access sensitive user data.
AFFECTED_PRODUCTS: Apple macOS
> CVE-2025-30450 [MEDIUM 5.5]
[PUBLISHED: 2025-03-31] [EPSS 0.27%]
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access sensitive user data.
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple macOS
> CVE-2025-30449 [HIGH 7.8]
[PUBLISHED: 2025-03-31] [EPSS 0.26%]
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to gain root privileges.
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple macOS
> CVE-2025-30447 [MEDIUM 5.5]
[PUBLISHED: 2025-03-31] [EPSS 0.32%]
The issue was resolved by sanitizing logging This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access sensitive user data.
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple macOS ... (+5)
> CVE-2025-30446 [MEDIUM 6.5]
[PUBLISHED: 2025-03-31] [EPSS 0.92%]
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app with root privileges may be able to modify the contents of system files.
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple macOS
> CVE-2025-30444 [CRITICAL 9.8]
[PUBLISHED: 2025-03-31] [EPSS 0.78%]
A race condition was addressed with improved locking. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Mounting a maliciously crafted SMB network share may lead to system termination.
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple macOS
> CVE-2025-30443 [MEDIUM 5.5]
[PUBLISHED: 2025-03-31] [EPSS 0.28%]
A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access user-sensitive data.
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple macOS
> CVE-2025-30441 [MEDIUM 5.5]
[PUBLISHED: 2025-03-31] [EPSS 0.24%]
This issue was addressed through improved state management. This issue is fixed in Xcode 16.3. An app may be able to overwrite arbitrary files.
AFFECTED_PRODUCTS: Apple Xcode
> CVE-2025-30439 [MEDIUM 4.6]
[PUBLISHED: 2025-03-31] [EPSS 0.41%]
The issue was addressed with improved checks. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An attacker with physical access to a locked device may be able to view sensitive user information.
AFFECTED_PRODUCTS: Apple macOS, Apple Iphone Os, Apple Ipados ... (+1)
> CVE-2025-30438 [MEDIUM 5.5]
[PUBLISHED: 2025-03-31] [EPSS 0.29%]
This issue was addressed with improved access restrictions. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A malicious app may be able to dismiss the system notification on the Lock Screen that a recording was...
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple macOS ... (+5)
> CVE-2025-30437 [HIGH 7.4]
[PUBLISHED: 2025-03-31] [EPSS 0.53%]
The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.4. An app may be able to corrupt coprocessor memory.
AFFECTED_PRODUCTS: Apple macOS
> CVE-2025-30435 [MEDIUM 5.5]
[PUBLISHED: 2025-03-31] [EPSS 0.27%]
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.4. A sandboxed app may be able to access sensitive user data in system logs.
AFFECTED_PRODUCTS: Apple macOS
> CVE-2025-30434 [MEDIUM 5.0]
[PUBLISHED: 2025-03-31] [EPSS 0.27%]
The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.4 and iPadOS 18.4. Processing a maliciously crafted file may lead to a cross site scripting attack.
AFFECTED_PRODUCTS: Apple Iphone Os, Apple Ipados
> CVE-2025-30433 [CRITICAL 9.8]
[PUBLISHED: 2025-03-31] [EPSS 1.29%]
This issue was addressed with improved access restrictions. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app.
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple macOS ... (+4)
> CVE-2025-30432 [MEDIUM 6.4]
[PUBLISHED: 2025-03-31] [EPSS 0.85%]
A logic issue was addressed with improved state management. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sonoma 14.7.5. A malicious app may be able to attempt passcode entries on a locked device and thereby cause escalating time...
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple Iphone Os ... (+4)
> CVE-2025-30430 [CRITICAL 9.8]
[PUBLISHED: 2025-03-31] [EPSS 1.19%]
This issue was addressed through improved state management. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Password autofill may fill in passwords after failing authentication.
AFFECTED_PRODUCTS: Apple macOS, Apple Iphone Os, Apple Ipados ... (+1)
> CVE-2025-30429 [MEDIUM 6.3]
[PUBLISHED: 2025-03-31] [EPSS 0.30%]
A path handling issue was addressed with improved validation. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to break out of its sandbox.
AFFECTED_PRODUCTS: Apple macOS, Apple Iphone Os, Apple Tvos ... (+3)
> CVE-2025-30428 [MEDIUM 5.4]
[PUBLISHED: 2025-03-31] [EPSS 0.35%]
This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6. Photos in the Hidden Photos Album may be viewed without authentication.
AFFECTED_PRODUCTS: Apple Iphone Os, Apple Ipados, Apple Ipados
> CVE-2025-30427 [MEDIUM 4.3]
[PUBLISHED: 2025-03-31] [EPSS 0.83%]
A use-after-free issue was addressed with improved memory management. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, Safari 18.4. Processing maliciously crafted web content may lead to an unexpected Safari crash.
AFFECTED_PRODUCTS: Apple macOS, Apple Safari, Apple Iphone Os ... (+4)
> CVE-2025-30426 [CRITICAL 9.8]
[PUBLISHED: 2025-03-31] [EPSS 1.23%]
This issue was addressed with additional entitlement checks. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. An app may be able to enumerate a user's installed apps.
AFFECTED_PRODUCTS: Apple macOS, Apple Iphone Os, Apple Tvos ... (+3)
> CVE-2025-30425 [MEDIUM 4.3]
[PUBLISHED: 2025-03-31] [EPSS 0.81%]
This issue was addressed through improved state management. This issue is fixed in tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. A malicious website may be able to track users in Safari private browsing mode.
AFFECTED_PRODUCTS: Apple macOS, Apple Safari, Apple Iphone Os ... (+3)