PT-2024-19752 · Apple · Macos Sonoma +2

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 1.1 macOS Sonoma versions prior to 14.4 Description: An out-of-bounds read issue was addressed with improved input validation. Processing an image may lead to arbitrary code execution. Recommendations: For visionOS...

PT-2024-19732 · Apple · Macos Sonoma +1

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.4 Description: An access issue was addressed with improved access restrictions. This issue allows an app to potentially edit NVRAM variables. Recommendations: For macOS Sonoma versions prior to 14.4, update t...

PT-2024-19745 · Apple · Macos Sonoma +5

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 17.4 Apple iPadOS versions prior to 17.4 Apple tvOS versions prior to 17.4 Apple macOS Sonoma versions prior to 14.4 Apple watchOS versions prior to 10.4 Description: An access issue was addressed with improved...

PT-2024-19756 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.7.6 macOS Sonoma versions prior to 14.4 macOS Ventura versions prior to 13.6.8 Description: A logic issue was addressed with improved state management, which may allow an attacker to read information belonging to...

Apple macOS Sonoma Security Vulnerability

Apple macOS Sonoma is a desktop operating system from the U.S.-based Apple Inc. A security vulnerability exists in Apple macOS Sonoma version 14.4, which stems from an application that may be able to access a user's photo library...

Apple macOS Sonoma Security Vulnerability

Apple macOS Sonoma is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma version 14.4, which stems from processing malicious input that could lead to code execution...

PT-2024-19763 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.7.4 macOS versions prior to 13.6.5 macOS versions prior to 14.4 Description: A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue allows an app to...

Apple macOS Sonoma Security Vulnerability

Apple macOS Sonoma is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma version 14.4, which stems from an application that may be able to access sensitive user data...

PT-2024-19742 · Apple · Macos Sonoma +1

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.4 Description: The issue was addressed with improved memory handling. Processing a file may lead to a denial-of-service or potentially disclose memory contents. Recommendations: For versions prior to 14.4,...

Apple macOS Sonoma Security Vulnerability

Apple macOS Sonoma is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma version 14.4, which originates from an application that may be able to bypass certain privacy preferences...

PT-2024-19724 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.7.5 macOS Ventura versions prior to 13.6.5 macOS Sonoma versions prior to 14.4 Description: A malicious application may be able to access Find My data due to an issue with sensitive information redaction. This issue...

PT-2024-19726 · Apple · Macos Sonoma +5

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.6.5 macOS Sonoma versions prior to 14.4 iOS versions prior to 17.4 iPadOS versions prior to 17.4 watchOS versions prior to 10.4 iOS versions prior to 16.7.6 iPadOS versions prior to 16.7.6 Description: A...

PT-2024-19753 · Apple · Macos Sonoma +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.7.6 iPadOS versions prior to 16.7.6 iOS versions prior to 17.4 iPadOS versions prior to 17.4 macOS Sonoma versions prior to 14.4 Description: The issue was addressed with improved checks. Processing web content may le...

PT-2024-19770 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.7.4 macOS versions prior to 13.6.5 macOS versions prior to 14.4 Description: A logic issue was addressed with improved checks, which may allow an app to elevate privileges. Recommendations: For macOS versions prior ...

BIT-GITLAB-2022-1433

An issue has been discovered in GitLab affecting all versions starting from 14.4 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. Missing invalidation of Markdown caching causes potential payloads from a previously exploitable XSS...

BIT-GITLAB-2022-2230

A Stored Cross-Site Scripting vulnerability in the project settings page in GitLab CE/EE affecting all versions from 14.4 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows an attacker to execute arbitrary JavaScript code in GitLab on a victim's behalf...

BIT-GITLAB-2022-3067

An issue has been discovered in the Import functionality of GitLab CE/EE affecting all versions starting from 14.4 before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1. It was possible for an authenticated user to read arbitrary projects'...

GitLab 13.2 < 14.3.6 / 14.4 < 14.4.4 / 14.5 < 14.5.2 (CVE-2021-39940)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. GitL...

PT-2023-3609 · Orchid · Orchid

Name of the Vulnerable Software and Affected Versions: Orchid versions 14.0.0-alpha4 through 14.4.x Description: A vulnerability is present in the Orchid package, related to the deserialization of untrusted data from the state query parameter, which can result in remote code execution. The issue...

Provide Server v.14.4 XSS - CSRF & Remote Code Execution Vulnerabilities

Provide Server v. 14.4 CVE-2023-23286 Vulnerabilities: CWE-79: Improper Neutralization of Input During Web Page Generation Unauthenticated stored XSS in server-log delivered via username field from login-form CWE-352: Cross-Site Request Forgery CSRF-token exposed in javascript, making it possible...