CVE-2018-4183

In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions...

Design/Logic Flaw

In macOS High Sierra before 10.13.2, an access issue existed with privileged WiFi system configuration. This issue was addressed with additional restrictions...

CVE-2017-13886

In macOS High Sierra before 10.13.2, an access issue existed with privileged WiFi system configuration. This issue was addressed with additional restrictions...

CVE-2017-13886

In macOS High Sierra before 10.13.2, an access issue existed with privileged WiFi system configuration. This issue was addressed with additional restrictions...

Code injection

In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions...

CVE-2017-13886

CVE-2017-13886 affects macOS High Sierra prior to 10.13.2, where an access issue existed with privileged Wi‑Fi system configuration. The description in the CVE entry and Apple’s security content confirms the vulnerability relates to Wi‑Fi configuration privileges and was addressed by introducing ...

CVE-2017-13886

In macOS High Sierra before 10.13.2, an access issue existed with privileged WiFi system configuration. This issue was addressed with additional restrictions...

CVE-2018-4183

In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions...

CVE-2018-4182

CVE-2018-4182 – CUPS sandbox bypass in macOS High Sierra . The connected sources confirm a local vulnerability in CUPS on macOS High Sierra prior to 10.13.5, described as an access issue that was mitigated by adding sandbox restrictions to CUPS. The impact is limited to a local attacker who could...

CVE-2018-4182

In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions on CUPS...

CVE-2018-4183

In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions...

CVE-2018-4183

CVE-2018-4183 affects macOS High Sierra via the CUPS component. The issue is described as a sandbox bypass in CUPS that could occur due to profile misconfiguration, allowing a local process to interact with or modify CUPS behavior outside its sandbox. Public sources (NVD entry for CVE-2018-4183 a...

CVE-2018-4182

In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions on CUPS...

SUSE-SU-2018:3987-1 Security update for kvm

This update for kvm fixes the following issues: Security issues fixed: - CVE-2018-10839: Fixed NE2000 NIC emulation support that is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use...

SUSE-SU-2018:3973-1 Security update for qemu

This update for qemu fixes the following issues: Security issues fixed: - CVE-2018-10839: Fixed NE2000 NIC emulation support that is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use...

Citrix Director error "403 Forbidden : access is denied"

When you try to access Director URL in the browser, there is an error displayed: Server Error - 403 - Forbidden: Access Denied...

Debian: Security Advisory (DSA-4340-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-19130

In Libav 12.3, there is an invalid memory access in vc1decodeframe in libavcodec/vc1dec.c that allows attackers to cause a denial-of-service via a crafted aac file. NOTE: This may be a duplicate of CVE-2017-17127...

Apple Mac OS X Security Updates (HT209193)-05

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Access and integrity issue within Eclipse Jetty

In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage of HttpSession details, it is possible for a malicious user to access/hijack other HttpSessions and even delete unmatched HttpSessions present in the FileSystem's...