Design/Logic Flaw

This issue was addressed with improved data protection. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. An app may be able to modify protected parts of the file system...

CVE-2023-35983

This issue was addressed with improved data protection. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. An app may be able to modify protected parts of the file system...

CVE-2023-35983

This issue was addressed with improved data protection. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. An app may be able to modify protected parts of the file system...

CVE-2023-35983

CVE-2023-35983 concerns a macOS data-protection issue where an app may modify protected parts of the file system. The entry states this was addressed with improved data protection and is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, and macOS Big Sur 11.7.9. The NVD description notes the vu...

DirectMusic Unauthorized Access

The vulnerability of the DirectMusic component in Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PostScript Printer Driver PCL6 Class Printer Unauthorized Access

The vulnerability of the PostScript Printer Driver Pscript and PCL6 Class Printer operating systems for Windows is related to insufficient protection of operational data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

Windows Cryptographic Unauthorized Access

The vulnerability of the Windows Cryptographic component in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PostScript Printer Driver PCL6 Class Printer Unauthorized Access

The vulnerability of the PostScript Printer Driver Pscript and PCL6 Class Printer operating systems for Windows is related to insufficient protection of operational data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

CVE-2023-34235 Leaking sensitive user information still possible by filtering on private with prefix fields

Strapi is an open-source headless content management system. Prior to version 4.10.8, it is possible to leak private fields if one is using the tnumber prefix. Knex query allows users to change the default prefix. For example, if someone changes the prefix to be the same as it was before or to...

PT-2023-4126 · Zkteco · Zkteco Bioaccess Ivs

Name of the Vulnerable Software and Affected Versions: ZKTeco BioAccess IVS version 3.3.1 Description: The issue is related to insufficient protection of service data in the ZKTeco BioAccess IVS web platform, which can be exploited by remote attackers to gain unauthorized access to sensitive...

Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Unmeasured Boot (CVE-2019-1589)

A vulnerability in the Trusted Platform Module TPM functionality of software for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI mode could allow an unauthenticated, local attacker with physical access to view sensitive information on an affected device. The...

Elenos ETG150 Unauthenticated Access

The vulnerability of the microprogramming software of the Elenos ETG150 transmitter is related to insufficient protection of operational data. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to the protected information...

PT-2023-4268 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.7.9 macOS versions prior to 12.6.8 macOS versions prior to 13.5 Description: The issue is related to insufficient access control in the macOS operating system, which may allow an app to modify protected parts of the...

macOS 13.x < 13.5 Multiple Vulnerabilities (HT213843)

The remote host is running a version of macOS / Mac OS X that is 13.x prior to 13.5. It is, therefore, affected by multiple vulnerabilities: - A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A...

macOS 12.x < 12.6.8 Multiple Vulnerabilities (HT213844)

The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.6.8. It is, therefore, affected by multiple vulnerabilities: - A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS...

About the security content of macOS Ventura 13.5

About the security content of macOS Ventura 13.5 This document describes the security content of macOS Ventura 13.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

About the security content of macOS Monterey 12.6.8

About the security content of macOS Monterey 12.6.8 This document describes the security content of macOS Monterey 12.6.8. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

About the security content of macOS Big Sur 11.7.9

About the security content of macOS Big Sur 11.7.9 This document describes the security content of macOS Big Sur 11.7.9. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

IBM Security Guardium License Issue Vulnerability (CNVD-2023-68784)

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. An authorization issue vulnerability exists in IBM Security...

IBM Security Guardium Input Validation Error Vulnerability

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. An input validation error vulnerability exists in IBM...