CVE-2019-8744

CVE-2019-8744 describes a memory corruption issue in the handling of IPv6 packets that could allow a malicious application to determine kernel memory layout. The vulnerability is addressed in Apple platforms via patches in macOS Catalina 10.15, macOS Catalina 10.15.1, tvOS 13, watchOS 6, and iOS ...

CVE-2019-8753

This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15, watchOS 6, iOS 13, tvOS 13. Processing maliciously crafted web content may lead to a cross site scripting attack...

CVE-2019-8753

CVE-2019-8753 affects CFNetwork in Apple platforms (macOS Catalina 10.15, iOS 13, watchOS 6, tvOS 13). Description: processing maliciously crafted web content may lead to a cross-site scripting (XSS) vulnerability. Root cause: inadequate checks in CFNetwork that allowed script execution when hand...

CVE-2019-8746

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6, iTunes 12.10.1 for Windows...

CVE-2019-8746

CVE-2019-8746 is an out-of-bounds read vulnerability that Apple documents as addressed by improved input validation. The CVE affects multiple Apple platforms in the 2019 timeframe, with specific fixes noted for macOS Catalina 10.15 and 10.15.1, iOS 13, tvOS 13, watchOS 6, iCloud for Windows 7.14/...

CVE-2019-8740

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 13.1 and iPadOS 13.1, watchOS 6, tvOS 13. An application may be able to execute arbitrary code with kernel privileges...

CVE-2019-8740

CVE-2019-8740 is a memory corruption vulnerability in Apple’s kernel components. The vulnerability allows an application to potentially execute arbitrary code with kernel privileges. Apple fixes this in iOS 13.1/iPadOS 13.1, watchOS 6, and tvOS 13 by improving locking in the related kernel code. ...

CVE-2019-8712

A memory corruption issue was addressed with improved memory handling. This issue is fixed in watchOS 6, iOS 13, tvOS 13. An application may be able to execute arbitrary code with system privileges...

CVE-2019-8712

CVE-2019-8712 is a memory corruption vulnerability reported in Apple OS kernels that could allow an app to execute arbitrary code with system privileges. The description notes a fix through improved memory handling, with patches in watchOS 6, iOS 13, and tvOS 13. Connected documents corroborate k...

CVE-2019-8718

CVE-2019-8718 is an IOUSBDeviceFamily memory corruption vulnerability in Apple devices. The issue could allow an attacker to execute arbitrary code with kernel privileges via a local exploit, as described in Apple advisories. Affected components include IOUSBDeviceFamily on iOS/watchOS/tvOS; root...

CVE-2019-8718

A memory corruption issue was addressed with improved memory handling. This issue is fixed in watchOS 6, iOS 13, tvOS 13. An application may be able to execute arbitrary code with kernel privileges...

CVE-2019-8734

CVE-2019-8734 involves memory corruption issues that Apple and related platforms addressed by memory management fixes. Publicly documented fixes include iOS 13, iCloud for Windows 7.14 and 10.7, Safari 13, tvOS 13, watchOS 6, and iTunes 12.10.1 for Windows. The description notes that processing m...

CVE-2019-8706

CVE-2019-8706 is a memory corruption issue in Apple’s audio stack (CoreAudio) that is triggered by processing a maliciously crafted audio file. Root cause: memory corruption in the audio processing path. Affected: macOS/macOS Catalina, iOS 13.1 and iPadOS 13.1, tvOS 13, watchOS 6; fixes implement...

CVE-2019-8709

CVE-2019-8709 is a memory-corruption issue in Apple platforms that may allow an application to execute arbitrary code with kernel privileges. Concrete details from connected documents indicate this affects macOS (kernel), and that patches are provided in macOS Catalina 10.15, macOS Catalina 10.15...

RHEL 6 : firefox (RHSA-2020:4330)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4330 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

rebornwelt.de Cross Site Scripting vulnerability OBB-1432972

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Moderate: Red Hat Security Advisory: rh-python36 security, bug fix, and enhancement update

An update for rh-python36-python, rh-python36-python-pip, and rh-python36-python-virtualenv is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives...

SonicWall SonicOS Buffer Overflow Vulnerability

According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by a buffer overflow vulnerability, allowing a remote attacker to cause Denial of Service DoS, and potentially execute arbitrary code by sending a malicious request to the...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3 security update

An update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 6, 7, and 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

RHEL 6 : chromium-browser (RHSA-2020:4235)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:4235 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 86.0.4240.75. Security Fixes:...