About the security content of macOS Ventura 13.7

About the security content of macOS Ventura 13.7 This document describes the security content of macOS Ventura 13.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

PT-2024-39153

Name of the Vulnerable Software and Affected Versions: MongoDB Server version 6.0.3 Description: The issue is related to MongoDB Server accessing a non-initialized region of memory, leading to unexpected behavior when zero arguments are called in an internal aggregation stage. Recommendations: Fo...

PT-2024-9821 · Fortinet · Fortiedr Manager Api

Name of the Vulnerable Software and Affected Versions: FortiEDR Manager API versions 6.0 through 6.2.2 Description: The issue is related to improper access control, allowing an authenticated admin with REST API permissions, restricted to a specific organization, to access backend logs that includ...

CVE-2022-48932

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: DR, Fix slab-out-of-bounds in mlx5cmddrcreatefte When adding a rule with 32 destinations, we hit the following out-of-band access issue: BUG: KASAN: slab-out-of-bounds in mlx5cmddrcreatefte+0x18ee/0x1e70 This patch fixe...

Citrix DaaS: Unable to login to Citrix cloud with MFA

Unable to login to Citrix Cloud with MFA with error " Opps! Something went wrong...

Unspecified vulnerability in Linux kernel (CNVD-2024-35103)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to account for the possibility that the NIC may only send statistics for some queues when reading...

CVE-2024-40821

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. Third party app extensions may not receive the correct sandbox restrictions...

CVE-2024-40821

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. Third party app extensions may not receive the correct sandbox restrictions...

CVE-2024-40821

CVE-2024-40821 is an access issue related to sandbox restrictions for third-party app extensions. The connected documents identify the affected platforms as macOS, with fixes in macOS Sonoma 14.6, macOS Monterey 12.7.6, and macOS Ventura 13.6.8. The underlying concern is that third-party app exte...

CVE-2024-40821

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. Third party app extensions may not receive the correct sandbox restrictions...

PT-2024-32991 · Unknown · Octopus Server

Name of the Vulnerable Software and Affected Versions: Octopus Server affected versions not specified Description: The issue allows a user with specific role assignments to access restricted project artifacts under certain conditions. Recommendations: At the moment, there is no information about ...

PT-2024-22696 · Softwarex · Softwarex

Name of the Vulnerable Software and Affected Versions: SoftwareX versions prior to 2.1.4 Description: The issue arises when a user's session is not invalidated after logout. Upon successful login, the Backend service returns an "Authorization" credential, which can still be used to initiate...

XenApp Error: Citrix Servers Reported That They are Too Busy to Provide Access to the Selected Resource

On attempting to launch any published application from a XenApp 6.0 server, the server reports that it is too busy to provide access to the selected resource. The application event log contains the following entry: The Citrix servers reported that they are too busy to provide access to the select...

Secure Web: Unable to open 4096-Bit encrypted Web Sites

When we try to access 4096-bit encrypted websites using Secure Web set to 'Tunneled to Internal network' and 'Secure Browse' mode, the website does not launch...

Unable to Connect the Secure Web with the Error "Cannot open page"

Unable to open the internal pages from Secure Web. Error"Cannot open page"is displayed...

Error: "The domain/user does not have access to the farm" when Accessing the Management Console

Administrator account is not able to access the management console and it generates error, "the domain/user does not have access to the farm"...

PT-2024-5130 · Zoom · Zoom Rooms For Windows +1

Name of the Vulnerable Software and Affected Versions: Zoom Workplace App for Windows affected versions not specified Zoom Rooms App for Windows affected versions not specified Description: The issue is related to a race condition in the installer, which may allow an authenticated user to conduct...

Easy!Appointments Security Vulnerability

Easy!Appointments is a web-based appointment and schedule management system. A security vulnerability exists in Easy!Appointments, which stems from an insecure authorization issue in the /secretaries/secretaryId interface. A low-privilege attacker can exploit this vulnerability to obtain, modify,...

PT-2024-40913 · Softwarex +1 · Softwarex +1

Name of the Vulnerable Software and Affected Versions: SoftwareX versions prior to 0.9.7 SoftwareX versions prior to 0.10.4 Description: The issue arises from unsafe memory accesses due to the assumption that reprpacked guarantees a specific field order in structs. However, the Rust specification...

CVE-2024-38381

In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in ncirxwork syzbot reported the following uninit-value access issue 1 ncirxwork parses received packet from ndev-rxq. It should be validated header size, payload size and total packet size before...