Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Priority LOW 21

Use of entitlement "com.apple.security.cs.disable-library-validation" and lack of launch and library load constraints allows to substitute a legitimate dylib with malicious one.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00152 Published 2025-05-29 No fix listed CWE-276
TI-2025-01215 CVE-2025-1413 · GHSA-47m3-cr54-pvmq

Dylib Hijacking in DaVinci Resolve

Priority LOW 38

DaVinci Resolve on MacOS was found to be installed with incorrect file permissions (rwxrwxrwx).

CVSS 4.0HIGH 8.4 Local Low privileges No interaction EPSS 0.00207 Published 2025-02-28 Fixed in 19.1.3 CWE-732
Priority MEDIUM 60

When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property containing an object referring to a UUID that was parsed from a frame within the…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.17945 Published 2021-12-22 No fix listed CWE-457
TI-2021-17481 CVE-2021-40417 · GHSA-9g9g-w89w-6r9g

Integer overflow in Blackmagic Design

Priority MEDIUM 58

When parsing a file that is submitted to the DPDecoder service as a job, the service will use the combination of decoding parameters that were submitted with the job along with fields that were parsed for the submitted v…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.15684 Published 2021-12-22 No fix listed CWE-680