June 13, 2017—KB4022725 (OS Build 15063.413 and 15063.414)

None None...

GStreamer Denial of Service Vulnerability (CNVD-2017-01488)

GStreamer is a set of frameworks for handling streaming media. A denial of service vulnerability exists in the gstdatetimenewfromiso8601string function in GStreamer gst/gstdatetime.c. A remote attacker can cause a denial of service out-of-bounds heap read via a malformed datetime string...

CVE-2017-5838

The gstdatetimenewfromiso8601string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds heap read via a malformed datetime string...

U.S. Dept Of Defense: SQLi in LASCO CME Query

A SQL injection vulnerability was discovered in the "CME DateTime" parameter on the LASCO CME Query form. The vulnerability allows an attacker to execute arbitrary SQL commands on the server...

The vulnerability of the Mac OS X operating system, which allows a hacker to determine the user’s location

The vulnerability of the Date & Time Pref Pane component in the Mac OS X operating system arises due to errors in the processing of the GlobalPreferences file. Exploiting this vulnerability allows a malicious actor to determine the user’s location through a specially created application...

CVE-2016-4715

The Date & Time Pref Pane component in Apple OS X before 10.12 mishandles the .GlobalPreferences file, which allows attackers to discover a user's location via a crafted app...

Code injection

The Date & Time Pref Pane component in Apple OS X before 10.12 mishandles the .GlobalPreferences file, which allows attackers to discover a user's location via a crafted app...

CVE-2016-4715

CVE-2016-4715 concerns the Date & Time Pref Pane in macOS OS X before 10.12. A crafted application can abuse the handling of the .GlobalPreferences file to disclose the user’s location. The entry is tied to a local attack vector with user interaction required, and the impact is described as infor...

macOS < 10.12 Multiple Vulnerabilities

The remote host is running a version of Mac OS X that is prior to 10.10.5, 10.11.x prior to 10.11.6, or is not macOS 10.12. It is, therefore, affected by multiple vulnerabilities in the following components : - apache - apachemodphp - Apple HSSPI Support - AppleEFIRuntime - AppleMobileFileIntegri...

PYSEC-2015-11

The getformat function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as demonstrated by SECRETKEY...

PYSEC-2015-11

The getformat function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as demonstrated by SECRETKEY...

CVE-2015-8213

The getformat function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as demonstrated by SECRETKEY...

The vulnerability of the Mac OS X operating system, which allows a hacker to manipulate timestamps

The vulnerability of the Mac OS X operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to forge timestamps due to errors in restricting access to the date and time settings panel...

Code injection

Apple OS X before 10.10.5 does not properly restrict access to the Date & Time preferences pane, which allows local users to spoof the time by visiting this pane...

CVE-2015-3757

Apple OS X before 10.10.5 does not properly restrict access to the Date & Time preferences pane, which allows local users to spoof the time by visiting this pane...

CVE-2015-3757

CVE-2015-3757 affects Apple OS X up to macOS Yosemite, specifically OS X before 10.10.5. The Date & Time preference pane could be accessed locally to spoof system time, enabling a local user to alter time settings via that pane. Connected sources confirm this is addressed by Apple’s OS X 10.10.5 ...

php: use after free vulnerability in unserialize() with DateTimeZone

A use-after-free flaw was found in the unserialize function of PHP's DateTimeZone implementation. A malicious script author could possibly use this flaw to disclose certain portions of server memory...

php: use after free vulnerability in unserialize() with DateTimeZone

A use-after-free flaw was found in the unserialize function of PHP's DateTimeZone implementation. A malicious script author could possibly use this flaw to disclose certain portions of server memory...

The vulnerability of the Red Hat Enterprise Linux operating system, which allows a remote attacker to compromise the accessibility of protected information

The vulnerability of the boost-date-time-1.41.0 package of the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...

The vulnerability of the CentOS operating system, which allows a malicious attacker to compromise the accessibility of protected information

The vulnerability of the boost-date-time-1.41.0 package on the CentOS operating system can lead to a violation of the accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...