1790 matches found
CVE-2023-45380
In the module "Order Duplicator " Clone and Delete Existing Order" orderduplicate in version = 1.1.7 from Silbersaiten for PrestaShop, a guest can download personal information without restriction. Due to a lack of permissions control, a guest can download personal information from...
PT-2023-29972 · Facebook · Pixel Plus: Events + Capi + Pixel Catalog For Facebook Module
Name of the Vulnerable Software and Affected Versions: Pixel Plus: Events + CAPI + Pixel Catalog for Facebook Module version 2.4.9 Description: The issue is related to a lack of permissions control in the module, allowing a guest to download personal information without restriction. This can lead...
PT-2023-32390 · Mattermost · Mattermost Desktop App
Name of the Vulnerable Software and Affected Versions: Mattermost Desktop affected versions not specified Description: The issue arises from Mattermost Desktop's failure to properly handle permissions or prompt the user for consent on certain sensitive ones, allowing media exploitation from a...
CVE-2023-40117
In resetSettingsLocked of SettingsProvider.java, there is a possible lockscreen bypass due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-40444
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1. An app may be able to access user-sensitive data...
CVE-2023-40421
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to access sensitive user data...
CVE-2023-40444
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1. An app may be able to access user-sensitive data...
Code injection
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to access sensitive user data...
CVE-2023-40444
CVE-2023-40444 affects macOS Sonoma 14.1, addressing a permissions flaw that could allow an app to access user-sensitive data. The fix is included in macOS Sonoma 14.1; the provided documents do not specify other affected versions or exploit details. Recommendation: update to macOS Sonoma 14.1 or...
CVE-2023-40444
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1. An app may be able to access user-sensitive data...
CVE-2023-40421
CVE-2023-40421 is a macOS permission issue affecting macOS Sonoma 14.1, macOS Monterey 12.7.1, and macOS Ventura 13.6.1 where an app may access sensitive user data. The vulnerability is mitigated by OS updates; Apple lists the fixes under the indicated Sonoma/Monterey/Ventura versions. The connec...
PT-2023-28649 · Apple · Macos Sonoma +1
Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.1 Description: A permissions issue was addressed with additional restrictions. This issue allows an app to gain unauthorized access to Bluetooth. The issue is fixed in macOS Sonoma 14.1. Recommendations: For...
PT-2023-8359 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.1 Description: A permissions issue was addressed with additional restrictions. This issue may allow an app to access user-sensitive data. The vulnerability is related to insufficient access restrictions in th...
macOS 12.x < 12.7.1 Multiple Vulnerabilities (HT213983)
The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.7.1. It is, therefore, affected by multiple vulnerabilities: - The issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.3, macOS Sonoma 14.1, macOS Monterey...
CVE-2023-40455
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14. A sandboxed process may be able to circumvent sandbox restrictions...
CVE-2023-40455
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14. A sandboxed process may be able to circumvent sandbox restrictions...
CVE-2023-40454
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to delete files for which it does not have permission...
CVE-2023-40429
A permissions issue was addressed with improved validation. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to access sensitive user data...