CVE-2024-23291

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, tvOS 17.4, watchOS 10.4. A malicious app may be able to observe user data in log entries related to accessibility notifications...

CVE-2024-23291

CVE-2024-23291 describes a privacy issue where a malicious app could observe user data in log entries related to accessibility notifications. Apple devices affected include tvOS 17.4, iOS 17.4, iPadOS 17.4, macOS Sonoma 14.4, and watchOS 10.4, which addressed this through improved private data re...

CVE-2024-23205

CVE-2024-23205 describes a privacy issue in Apple platforms where an app may be able to access sensitive user data due to insufficient private data redaction in log entries. The vulnerability is fixed in macOS Sonoma 14.4, iOS 17.4, and iPadOS 17.4. Affected components are tied to log handling, w...

CVE-2024-23205

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to access sensitive user data...

CVE-2024-23205

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An app may be able to access sensitive user data...

CVE-2024-23231

CVE-2024-23231 concerns a privacy issue where private data in log entries could be exposed. Affected products include iOS and iPadOS (versions prior to 16.7.6 and 17.4), macOS Sonoma 14.4 and macOS Ventura 13.6.5, and watchOS 10.4. The root cause is insufficient redaction of sensitive user data i...

CVE-2024-23283

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to access user-sensitive data...

CVE-2024-23283

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5. An app may be able to access user-sensitive data...

CVE-2024-23283

CVE-2024-23283 describes a privacy issue where private data was not properly redacted in log entries. The NVD entry states the issue is fixed in iOS 16.7.6, iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.4, and macOS Ventura 13.6.5, addressing a potential exposure of user‑sensitive data. T...

ALPINE-CVE-2024-1931

NLnet Labs Unbound version 1.18.0 up to and including version 1.19.1 contain a vulnerability that can cause denial of service by a certain code path that can lead to an infinite loop. Unbound 1.18.0 introduced a feature that removes EDE records from responses with size higher than the client's...

SUSE CVE-2023-52516

In the Linux kernel, the following vulnerability has been resolved: dma-debug: don't call dmaentryalloccheckleak under freeentrieslock dmaentryalloccheckleak calls into printk - serial console output qcom geni and grabs port-lock under freeentrieslock spin lock, which is a reverse locking...

PT-2024-22048 · Apple · Macos Sonoma +1

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.4 Description: A privacy issue was addressed with improved private data redaction for log entries. This issue may allow an app to access user-sensitive data. Recommendations: For macOS Sonoma versions prior t...

PT-2024-19777 · Apple · Macos Monterey +5

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.7.6 iPadOS versions prior to 16.7.6 macOS Monterey versions prior to 12.7.4 macOS Sonoma versions prior to 14.4 macOS Ventura versions prior to 13.6.5 Description: A privacy issue was addressed with improved private...

PT-2024-19785 · Apple · Macos Sonoma +5

Name of the Vulnerable Software and Affected Versions: tvOS versions prior to 17.4 iOS versions prior to 17.4 iPadOS versions prior to 17.4 macOS Sonoma versions prior to 14.4 watchOS versions prior to 10.4 Description: A privacy issue was addressed with improved private data redaction for log...

WordPress Contact Form Entries Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)

Software Contact Form Entries Type Plugin Vulnerable versions = 1.3.3 Fixed in 1.3.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2030 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5485073f02fc Credits Krzysztof Zając...

BIT-REDMINE-2020-36308

Redmine before 4.0.7 and 4.1.x before 4.1.1 allows attackers to discover the subject of a non-visible issue by performing a CSV export and reading time entries...

BIT-PHP-2023-0662 DoS vulnerability when parsing multipart request body

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space...

BIT-ODOO-2021-44461

Cross-site scripting XSS issue in Accounting app of Odoo Enterprise 13.0 through 15.0, allows remote attackers who are able to control the contents of accounting journal entries to inject arbitrary web script in the browser of a victim...

BIT-MONGODB-2021-20333 Server log entry spoofing via newline injection

Sending specially crafted commands to a MongoDB Server may result in artificial log entries being generated or for log entries to be split. This issue affects MongoDB Server v3.6 versions prior to 3.6.20; MongoDB Server v4.0 versions prior to 4.0.21 and MongoDB Server v4.2 versions prior to 4.2.1...

Information disclosure

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.4 and iPadOS 17.4. An app may be able to read sensitive location information...