Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (10235 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-43995 1 Dell 1 Storage Manager 2025-11-04 9.8 Critical
Dell Storage Center - Dell Storage Manager, version(s) 20.1.21, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. Authentication Bypass in DSM Data Collector. An unauthenticated remote attacker can access APIs exposed by ApiProxy.war in DataCollectorEar.ear by using a special SessionKey and UserId. These userid are special users created in compellentservicesapi for special purposes.
CVE-2025-64103 1 Zitadel 1 Zitadel 2025-11-04 9.8 Critical
Starting from 2.53.6, 2.54.3, and 2.55.0, Zitadel only required multi factor authentication in case the login policy has either enabled requireMFA or requireMFAForLocalUsers. If a user has set up MFA without this requirement, Zitadel would consider single factor auhtenticated sessions as valid as well and not require multiple factors. Bypassing second authentication factors weakens multifactor authentication and enables attackers to bypass the more secure factor. An attacker can target the TOTP code alone, only six digits, bypassing password verification entirely and potentially compromising accounts with 2FA enabled. This vulnerability is fixed in 4.6.0, 3.4.3, and 2.71.18.
CVE-2025-43332 1 Apple 1 Macos 2025-11-04 5.2 Medium
A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. An app may be able to break out of its sandbox.
CVE-2025-43321 1 Apple 4 Macos, Macos Sequoia, Macos Sonoma and 1 more 2025-11-04 5.5 Medium
The issue was resolved by blocking unsigned services from launching on Intel Macs. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. An app may be able to access protected user data.
CVE-2025-43319 1 Apple 1 Macos 2025-11-04 5.5 Medium
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. An app may be able to access protected user data.
CVE-2025-43317 1 Apple 8 Ios, Ipad Os, Ipados and 5 more 2025-11-04 5.5 Medium
A permissions issue was addressed with additional restrictions. This issue is fixed in visionOS 26, tvOS 26, iOS 26 and iPadOS 26, watchOS 26. An app may be able to access sensitive user data.
CVE-2025-43315 1 Apple 4 Macos, Macos Sequoia, Macos Sonoma and 1 more 2025-11-04 5.5 Medium
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. An app may be able to access user-sensitive data.
CVE-2025-43308 1 Apple 4 Macos, Macos Sequoia, Macos Sonoma and 1 more 2025-11-04 3.3 Low
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. An app may be able to access sensitive user data.
CVE-2025-43305 1 Apple 1 Macos 2025-11-04 5.5 Medium
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. A malicious app may be able to access private information.
CVE-2025-43291 1 Apple 4 Macos, Macos Sequoia, Macos Sonoma and 1 more 2025-11-04 5.5 Medium
A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. An app may be able to modify protected parts of the file system.
CVE-2025-43285 1 Apple 1 Macos 2025-11-04 5.5 Medium
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. An app may be able to access protected user data.
CVE-2025-31269 1 Apple 3 Macos, Macos Sonoma, Macos Tahoe 2025-11-04 5.5 Medium
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8. An app may be able to access protected user data.
CVE-2025-31268 1 Apple 1 Macos 2025-11-04 5.5 Medium
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. An app may be able to access protected user data.
CVE-2025-31255 1 Apple 9 Ios, Ipados, Iphone Os and 6 more 2025-11-04 9.8 Critical
An authorization issue was addressed with improved state management. This issue is fixed in tvOS 26, watchOS 26, macOS Sonoma 14.8, iOS 26 and iPadOS 26, macOS Sequoia 15.7. An app may be able to access sensitive user data.
CVE-2025-24197 1 Apple 4 Macos, Macos Sequoia, Macos Sonoma and 1 more 2025-11-04 5.5 Medium
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8, macOS Sequoia 15.7. An app may be able to access sensitive user data.
CVE-2024-30146 1 Hcltech 1 Domino Leap 2025-11-04 4.1 Medium
Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the server's filesystem.
CVE-2025-43231 1 Apple 2 Macos, Macos Sonoma 2025-11-04 5.5 Medium
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8. An app may be able to access user-sensitive data.
CVE-2024-8805 1 Bluez 1 Bluez 2025-11-03 8.8 High
BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the HID over GATT Profile. The issue results from the lack of authorization prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25177.
CVE-2024-54515 1 Apple 1 Macos 2025-11-03 7.8 High
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.2. A malicious app may be able to gain root privileges.
CVE-2024-54513 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2025-11-03 5.7 Medium
A permissions issue was addressed with additional restrictions. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2. An app may be able to access sensitive user data.