5956 matches found
Cisco Unified Communications Manager DoS (cisco-sa-cucm-dos-4Ag3yWbD)
The version of Cisco Unified Communications Manager installed on the remote host is prior to 12.51SU8 or is version 14 prior to 14SU3. It is, therefore, affected by a denial-of-service vulnerability. Due to insufficient validation of user-supplied input to the web UI of the Self Care Portal, an...
Amazon Linux 2 : libarchive (ALAS-2023-2279)
The version of libarchive installed on the remote host is prior to 3.1.2-14. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2279 advisory. In libarchive 3.6.1, the software does not check for an error after calling calloc function that can return with a NULL pointer...
Android 14 Security Release NotesStay organized with collectionsSave and categorize content based on your preferences.
This Android Security Release Notes contains details of security vulnerabilities affecting Android devices which are addressed as part of Android 14. Android 14 devices with a security patch level of 2023-10-01 or later are protected against these issues Android 14 , as released on AOSP, will hav...
CVE-2023-39923
creationtimestamp| type| source ---|---|--- 2023-10-03 16:41:14+00:00| seen| https://t.me/cibsecurity/71490...
SUSE CVE-2023-35074
The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution...
Fedora 38 : webkitgtk (2023-e2c2896d16)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-e2c2896d16 advisory. Fix enable-html5-database setting to properly enable/disable IndexedDB API. Fix the build with GBM disabled. Fix several crashes and rendering issues. Securi...
Apple Releases Security Updates for Multiple Products
Apple has released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply the necessary updates...
CVE-2023-1672 affecting package tang for versions less than 14-1
CVE-2023-1672 affecting package tang for versions less than 14-1. An upgraded version of the package is available that resolves this issue...
CVE-2023-41995
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges...
CVE-2023-41980
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to bypass Privacy preferences...
CVE-2023-41981
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations...
CVE-2023-41979
A race condition was addressed with improved locking. This issue is fixed in macOS Sonoma 14. An app may be able to modify protected parts of the file system...
CVE-2023-41067
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...
CVE-2023-41079
The issue was addressed with improved permissions logic. This issue is fixed in macOS Sonoma 14. An app may be able to bypass Privacy preferences...
CVE-2023-41078
An authorization issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14. An app may be able to bypass certain Privacy preferences...
CVE-2023-41074
The issue was addressed with improved checks. This issue is fixed in tvOS 17, Safari 17, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. Processing web content may lead to arbitrary code execution...
CVE-2023-41078
An authorization issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14. An app may be able to bypass certain Privacy preferences...
CVE-2023-41066
An authentication issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14. An app may be able to unexpectedly leak a user's credentials from secure text fields...
CVE-2023-41066
An authentication issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14. An app may be able to unexpectedly leak a user's credentials from secure text fields...