Lucene search
+L

80 matches found

BDU FSTEC
BDU FSTEC
added 2024/08/01 12:0 a.m.12 views

The vulnerability of the User InformationHandler component in the control panel of the software platform for integrating IBM App Connect Enterprise applications allows a perpetrator to obtain confidential calendar information using an access token with expired validity.

The vulnerability of the User Information Handler component in the software control panel for IBM App Connect Enterprise integration is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain confidential...

4.3CVSS5.5AI score0.00275EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/08/01 12:0 a.m.9 views

The vulnerability of the Access Token Handler component in the software integration control panel for IBM App Connect Enterprise allows a malicious actor to obtain confidential calendar information using an access token with an expired validity period.

The vulnerability of the Access Token Handler component in the software integration control panel for IBM App Connect Enterprise is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to obtain confidential calendar information using ...

4.3CVSS5.5AI score0.00261EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2024/05/22 7:15 p.m.9 views

CVE-2024-31893

IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive calendar information using an expired access token. IBM X-Force ID: 288174...

4.3CVSS5.8AI score0.00261EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/05/22 12:0 a.m.12 views

PT-2024-5321 · Ibm · Ibm App Connect Enterprise

Name of the Vulnerable Software and Affected Versions: IBM App Connect Enterprise versions 12.0.1.0 through 12.0.12.1 Description: The issue is related to the Access Token Handler component of IBM App Connect Enterprise, which has weaknesses in its authentication procedure. This can allow a remot...

4.3CVSS6.9AI score0.00261EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2024/05/22 12:0 a.m.16 views

PT-2024-5323 · Ibm · Ibm App Connect Enterprise

Name of the Vulnerable Software and Affected Versions: IBM App Connect Enterprise versions 12.0.1.0 through 12.0.12.1 Description: The issue is related to the User Information Handler component of IBM App Connect Enterprise, which has authentication procedure weaknesses. This can allow a remote...

6.5CVSS7.1AI score0.00275EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2024/05/22 12:0 a.m.8 views

IBM App Connect Enterprise 安全漏洞

IBM App Connect Enterprise is an operating system from International Business Machines IBM, Inc. that combines existing industry-trusted IBM Integration Bus technology with IBM App Connect Professional and new cloud-native IBM App Connect Enterprise combines existing industry-trusted IBM...

4.3CVSS6.4AI score0.00261EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/03/07 12:0 a.m.4 views

PT-2024-19782 · Apple · Macos Sonoma +4

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 16.7.6 Apple iPadOS versions prior to 16.7.6 Apple iOS versions prior to 17.4 Apple iPadOS versions prior to 17.4 Apple macOS Sonoma versions prior to 14.4 Apple watchOS versions prior to 10.4 Description: A lock...

5.5CVSS7.1AI score0.00289EPSS
SaveExploits0References13
OSV
OSV
added 2024/01/10 10:15 p.m.8 views

CVE-2023-40529

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 17 and iPadOS 17. A person with physical access to a device may be able to use VoiceOver to access private calendar information...

2.4CVSS5.7AI score0.00213EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/01/10 12:0 a.m.9 views

Apple iOS and iPadOS Security Vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 17 and iPadOS version 17, which arises from the fact that a person wi...

2.4CVSS5.8AI score0.00213EPSS
SaveExploits0References3
NVD
NVD
added 2023/09/27 3:18 p.m.31 views

CVE-2023-29497

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14. An app may be able to access calendar data saved to a temporary directory...

3.3CVSS2.8AI score0.00242EPSS
SaveExploits0References3
OSV
OSV
added 2023/09/27 3:18 p.m.6 views

CVE-2023-29497

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14. An app may be able to access calendar data saved to a temporary directory...

3.3CVSS5.8AI score0.00242EPSS
SaveExploits0References3
Prion
Prion
added 2023/09/27 3:18 p.m.28 views

Directory traversal

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14. An app may be able to access calendar data saved to a temporary directory...

1.9CVSS3.9AI score0.00242EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/09/26 8:14 p.m.39 views

CVE-2023-29497

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14. An app may be able to access calendar data saved to a temporary directory...

5.3AI score0.00242EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/09/26 8:14 p.m.14 views

CVE-2023-29497

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14. An app may be able to access calendar data saved to a temporary directory...

5.7AI score0.00242EPSS
SaveExploits0References2
CVE
CVE
added 2023/09/26 8:14 p.m.82 views

CVE-2023-29497

The CVE-2023-29497 issue affects macOS Sonoma 14, where an app may access calendar data stored in a temporary directory due to inadequate handling of temporary files. The vulnerability is fixed in macOS Sonoma 14; remediation is to update to Sonoma 14. In practice, the impact is limited to local ...

3.3CVSS3.8AI score0.00242EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2023/09/26 12:0 a.m.9 views

Apple macOS Security Breach

Apple macOS is a dedicated operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma version 14, which stems from an application that may be able to access calendar data saved to a temporary directory...

3.3CVSS6.5AI score0.00242EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/09/26 12:0 a.m.11 views

PT-2023-22281 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: A privacy issue was addressed with improved handling of temporary files. This issue may allow an app to access calendar data saved to a temporary directory. Recommendations: For versions prior to 14,...

3.3CVSS3.2AI score0.00242EPSS
SaveExploits0References6
OSV
OSV
added 2023/04/10 7:15 p.m.6 views

CVE-2022-32871

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16. A person with physical access to a device may be able to use Siri to access private calendar information...

2.4CVSS5.3AI score0.00258EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/04/10 12:0 a.m.11 views

Apple iOS 安全漏洞

Apple iOS is an operating system developed by Apple Inc. for mobile devices. A security vulnerability exists in Apple iOS prior to version 16, which stems from the ability of someone with physical access to the device to use Siri to access private calendar information...

2.4CVSS4.9AI score0.00258EPSS
SaveExploits0References2
OSV
OSV
added 2022/03/14 3:15 p.m.8 views

CVE-2022-0658

The CommonsBooking WordPress plugin before 2.6.8 does not sanitise and escape the location parameter of the calendardata AJAX action available to unauthenticated users before it is used in dynamically constructed SQL queries, leading to an unauthenticated SQL injection...

9.8CVSS5.8AI score0.08631EPSS
SaveExploits2References1
Rows per page
Query Builder