SUSE: Security Advisory (SUSE-SU-2015:0669-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2015:1782-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-1782

A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to elevate privileges. Apple is aware of a...

CVE-2021-1782

CVE-2021-1782 is an iOS/XNU in-the-wild vulnerability in the IPC vouchers subsystem. Project Zero details a race window around user_data handling: an non-atomic increment of e_made in a user_data_value_element can desynchronize with ivace->ivace_made, enabling a race between releasing and revi...

New 'unc0ver' Tool Can Jailbreak All iPhone Models Running iOS 11.0 - 14.3

A popular jailbreaking tool called "unc0ver" has been updated to support iOS 14.3 and earlier releases, thereby making it possible to unlock almost every single iPhone model using a vulnerability that Apple in January disclosed was actively exploited in the wild. The latest release, dubbed unc0ve...

Apple Patches Three Actively Exploited Zero-Days, Part of iOS Emergency Update

Apple continues to put out potential security fires by patching zero-day vulnerabilities, releasing an emergency update this week to patch three more recently discovered in iOS after a major software update in November already fixed three that were being actively exploited. The newly patched bugs...

CVE-2021-1782

creationtimestamp| type| source ---|---|--- 2021-01-26 19:50:53+00:00| exploited| https://t.me/alexmakus/3855 2021-01-27 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=543 2021-02-15 06:56:29+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2694...

VulnCheck KEV: CVE-2021-1782

Apple iOS, iPadOs, macOS, watchOS, and tvOS contain a race condition vulnerability that may allow a malicious application to elevate privileges...

openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2019:1782-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-1782

Cisco FXOS and NX-OS Software Command Injection (CVE-2019-1782) affects the CLI of Cisco FXOS and NX-OS. The vulnerability stems from insufficient validation of arguments passed to certain CLI commands, allowing an authenticated, local attacker to run arbitrary commands on the device’s underlying...

Cisco FXOS and NX-OS Software Command Injection Vulnerabilities (CVE-2019-1781, CVE-2019-1782)

Multiple vulnerabilities in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. These vulnerabilities are due to insufficient validation of arguments passed to...

Debian: Security Advisory (DLA-1782-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: A security vulnerability has been identified in IBM Spectrum Scale bundled with IBM Cloud PowerVC Manager for Software Defined Infrastructure (CVE-2018-1782)

Summary IBM Spectrum Scale v5.0.0 bundled with IBM Cloud PowerVC Manager for Software Defined Infrastructure SDI v1.1.0 can be upgraded to v5.0.1.X. IBM Spectrum Scale v5.0.1 is bundled with IBM Cloud PowerVC Manager for Software Defined Infrastructure SDI v1.1.1. Information about a security...

CVE-2018-1782

IBM GPFS IBM Spectrum Scale 5.0.1.0 and 5.0.1.1 allows a local, unprivileged user to cause a kernel panic on a node running GPFS by accessing a file that is stored on a GPFS file system with mmap, or by executing a crafted file stored on a GPFS file system. IBM X-Force ID: 148805...

CVE-2018-1782

CVE-2018-1782 affects IBM Spectrum Scale (GPFS) 5.0.1.0 and 5.0.1.1. A local, unprivileged user can trigger a kernel panic on a node running GPFS by either mmap-ing a file stored on a GPFS file system or by executing a crafted file stored on GPFS. IBM’s notices confirm the vulnerability is limite...

Security Bulletin: Vulnerability in libssh2 affects PowerKVM (CVE-2015-1782)

Summary A vulnerability in libssh2 CVE-2015-1782 affects PowerKVM. Vulnerability Details CVEID: CVE-2015-1782 DESCRIPTION: libssh2 is vulnerable to a denial of service, caused by an error in kexagreemethods function. By sending a specially-craftedlity to cause the system to stop responding...

CVE-2016-1782

WebKit in Apple iOS before 9.3 and Safari before 9.1 does not properly restrict redirects that specify a TCP port number, which allows remote attackers to bypass intended port restrictions via a crafted web site...

CVE-2016-1782

WebKit in Apple iOS before 9.3 and Safari before 9.1 does not properly restrict redirects that specify a TCP port number, which allows remote attackers to bypass intended port restrictions via a crafted web site...

CVE-2016-1782

CVE-2016-1782 affects WebKit in Apple iOS before 9.3 and Safari before 9.1. The issue arises because redirects that specify a TCP port number are not properly restricted, enabling a remote attacker to bypass intended port restrictions via a crafted website. Impact per provided sources is that thi...

About the security content of Safari 9.1

About the security content of Safari 9.1 This document describes the security content of Safari 9.1. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To...