PT-2023-20943

Name of the Vulnerable Software and Affected Versions Xuxueli xxl-job versions 2.2.0 through 2.3.1 Description A permissions issue allows an attacker to obtain sensitive information via the pageList parameter. Recommendations For versions 2.2.0 through 2.3.1, consider restricting access to the...

PT-2023-20942 · Isoftforce · Isoftforce Dreamer Cms

Name of the Vulnerable Software and Affected Versions: isoftforce Dreamer CMS version 4.0.1 Description: A permissions issue allows local attackers to obtain sensitive information via the AttachmentController parameter. This issue can be exploited to gain access to restricted data. Recommendation...

CVE-2023-23939

Azure/setup-kubectl is a GitHub Action for installing Kubectl. This vulnerability only impacts versions before version 3. An insecure temporary creation of a file allows other actors on the Actions runner to replace the Kubectl binary created by this action because it is world writable. This...

USN-5919-1: Linux kernel vulnerabilities

It was discovered that the Upper Level Protocol ULP subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state in certain protocols, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execut...

CVE-2023-23510

A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.2. An app may be able to access a user’s Safari history...

CVE-2023-23506

A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.2. An app may be able to access user-sensitive data...

CVE-2023-23506

A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.2. An app may be able to access user-sensitive data...

CVE-2023-23506

A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.2. An app may be able to access user-sensitive data...

CVE-2023-23510

CVE-2023-23510 describes a permissions issue in macOS Ventura 13.2 where an app may access a user’s Safari history due to improved validation in the security update. Affected product: macOS Ventura with Safari components exposed by the update. Root cause (as stated): an issue with validation that...

CVE-2023-23510

A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.2. An app may be able to access a user’s Safari history...

UBUNTU-CVE-2022-36397

Incorrect default permissions in the software installer for some IntelR QAT drivers for Linux before version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access...

SUSE CVE-2019-18463

An issue was discovered in GitLab Community and Enterprise Edition through 12.4. It has Insecure Permissions issue 4 of 4...

SUSE CVE-2020-5974

NVIDIA JetPack SDK, version 4.2 and 4.3, contains a vulnerability in its installation scripts in which permissions are incorrectly set on certain directories, which can lead to escalation of privileges...

PT-2023-6790 · Libtiff +7 · Libtiff +7

Name of the Vulnerable Software and Affected Versions: LibTIFF affected versions not specified Description: A NULL pointer dereference in TIFFClose is caused by a failure to open an output file, such as a non-existent path or a path that requires permissions like /dev/null, while specifying zones...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS versions prior to 13.2 that stems from a permissions issue where an application may be able to access a user's Safari history...

PT-2023-18998

Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.2 Description A permissions issue was addressed with improved validation, which may have allowed an app to access user-sensitive data. Recommendations For versions prior to 13.2, update to macOS Ventura 13.2 to resol...

PT-2023-19002

Name of the Vulnerable Software and Affected Versions macOS Ventura versions prior to 13.2 Description A permissions issue was addressed with improved validation, which may have allowed an app to access a user's Safari history. Recommendations For macOS Ventura versions prior to 13.2, update to...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura prior to version 13.2, which stems from a permissions issue where applications may be able to access user-sensitive content...

PT-2023-12633 · Lenovo · Lenovo Leyun Cloud Music Application

Name of the Vulnerable Software and Affected Versions: Lenovo Leyun cloud music application affected versions not specified Description: The issue is related to an incorrect default permissions setting, which could lead to a denial of service. Recommendations: At the moment, there is no informati...

GHSA-Q84X-3476-8FF2 Apache James MIME4J vulnerable to information disclosure to local users

Unproper laxist permissions on the temporary files used by MIME4J TempFileStorageProvider may lead to information disclosure to other local users. This issue affects Apache James MIME4J version 0.8.8 and prior versions. We recommend users to upgrade to MIME4j version 0.8.9 or later...