More than a quarter of Americans fell for robocall scam calls in past year

More and more Americans have been falling victim to phone scams since 2019. According to the latest report from Truecaller Google Docs upload of the entire report, separate blog here, a known spam blocker and caller ID app, 68.4 million Americans were victimized in the last 12 months, a substanti...

CVE-2022-26767

The issue was addressed with additional permissions checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to bypass Privacy preferences...

CVE-2022-26767

The issue was addressed with additional permissions checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to bypass Privacy preferences...

Design/Logic Flaw

The issue was addressed with additional permissions checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to bypass Privacy preferences...

CVE-2022-26767

The issue was addressed with additional permissions checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to bypass Privacy preferences...

CVE-2022-26767

The issue was addressed with additional permissions checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to bypass Privacy preferences...

CVE-2022-26746

This issue was addressed by removing the vulnerable code. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to bypass Privacy preferences...

CVE-2022-26746

Summary (CVE-2022-26746) Apple macOS contained a vulnerability that could let a malicious app bypass Privacy preferences. It was addressed by removing the vulnerable code and is fixed in Security Update 2022-004 for Catalina, macOS Monterey 12.4, and macOS Big Sur 11.6.6. Across multiple sources,...

GO-2022-0171 Mishandled trust preferences for root certificates on Darwin in crypto/x509

On Darwin, user's trust preferences for root certificates were not honored. If the user had a root certificate loaded in their Keychain that was explicitly not trusted, a Go program would still verify a connection using that root certificate...

Moodle User fullname disclosure on user preferences page

Moodle 3.x has user fullname disclosure on the user preferences page...

GHSA-54R2-R67G-FR9M Moodle User fullname disclosure on user preferences page

Moodle 3.x has user fullname disclosure on the user preferences page...

Moodle SQL injection via user preferences

In Moodle 2.x and 3.x, SQL injection can occur via user preferences...

GHSA-XHQ3-455R-XV44 Moodle SQL injection via user preferences

In Moodle 2.x and 3.x, SQL injection can occur via user preferences...

PT-2022-21549 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.4 macOS Big Sur versions prior to 11.6.6 Description: The issue allows an app to bypass Privacy preferences. It was addressed with improved checks. Recommendations: For macOS versions prior to 12.4, update to macOS...

PT-2022-18066 · Apple · Macos Monterey +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.4 macOS Big Sur versions prior to 11.6.6 Description: The issue allows a malicious application to bypass Privacy preferences. This was addressed with additional permissions checks. Recommendations: For macOS version...

Apple macOS Monterey 权限许可和访问控制问题漏洞

Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. Apple macOS Monterey versions 12.0 21A344 through 12.3.1 21E258 have a Permission Permission and Access Control Issue vulnerability that stems from improper permission checking and an issue...

Symphony CMS XSS Vulnerabilities

Multiple cross-site scripting XSS vulnerabilities in content/content.systempreferences.php in Symphony CMS before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via the 1 emailsendmailfromname, 2 emailsendmailfromaddress, 3 emailsmtpfromname, 4 emailsmtpfromaddress, 5...

GHSA-4C5W-QQFG-GRF3 Symphony CMS XSS Vulnerabilities

Multiple cross-site scripting XSS vulnerabilities in content/content.systempreferences.php in Symphony CMS before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via the 1 emailsendmailfromname, 2 emailsendmailfromaddress, 3 emailsmtpfromname, 4 emailsmtpfromaddress, 5...

EulerOS 2.0 SP10 : gnupg2 (EulerOS-SA-2022-1505)

According to the versions of the gnupg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GnuPG 2.2.21 and 2.2.22 and Gpg4win 3.1.12 has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports ...

Apple macOS Big Sur has an unspecified vulnerability (CNVD-2022-55158)

Apple macOS Big Sur is a mobile application app from Apple Inc. A security vulnerability exists in Apple macOS Big Sur that could be exploited by attackers to allow malicious applications to bypass certain privacy preferences...