8751 matches found
About the security content of iOS 10.2 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...
August 16, 2017—KB4034661 (OS Build 14393.1613)
None None...
MGASA-2017-0248 Updated gdm packages fix security vulnerability
It was found that gdm could crash due to a signal handler dispatched to an invalid conversation. An attacker could crash gdm by holding the escape key when the screen is locked, possibly bypassing the locked screen CVE-2015-7496...
June 13, 2017—KB4022725 (OS Build 15063.413 and 15063.414)
None None...
gdm: Crash when holding Escape in log screen
It was found that gdm could crash due to a signal handler dispatched to an invalid conversation. An attacker could crash gdm by holding the escape key when the screen is locked, possibly bypassing the locked screen...
Moderate: Red Hat Security Advisory: gdm and gnome-session security, bug fix, and enhancement update
An update for gdm and gnome-session is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2017-5093
Inappropriate implementation in modal dialog handling in Blink in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to prevent a full screen warning from being displayed via a crafted HTML page...
PT-2017-16293
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 60.0.3112.78 Opera versions prior to 60.0.3112.78 Description The issue is related to an inappropriate implementation in modal dialog handling in Blink, which allowed a remote attacker to prevent a full screen...
macOS Fruitfly Backdoor Analysis Renders New Spying Capabilities
LAS VEGAS—The FruitFly backdoor became a known entity in January, but it’s a good bet that for years it had been in the wild, undetected by analysts and security software. The macOS and OS X malware has a number of insidious spying capabilities that would make anyone uneasy, and a variant recentl...
CVE-2017-11516
An XSS vulnerability exists in framework/views/errorHandler/exception.php in Yii Framework 2.0.12 affecting the exception screen when debug mode is enabled, because $exception-errorInfo is mishandled...
CVE-2017-11516: Improper Neutralization of Input During Web Page Generation
An XSS vulnerability exists in framework/views/errorHandler/exception.php in Yii Framework 2.0.12 affecting the exception screen when debug mode is enabled, because $exception-errorInfo is mishandled...
Apple iOS Notifications Information Disclosure Vulnerability
Apple iOS is an operating system developed by Apple for mobile devices, and Notifications is one of the notification components. An information disclosure vulnerability exists in the Notifications component in Apple iOS versions prior to 10.3.3. When the Notifications feature is disabled, an...
CVE-2017-7058
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. The issue involves the "Notifications" component. It allows physically proximate attackers to read unintended notifications on the lock screen...
CVE-2017-7058
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. The issue involves the "Notifications" component. It allows physically proximate attackers to read unintended notifications on the lock screen...
Code injection
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. The issue involves the "Notifications" component. It allows physically proximate attackers to read unintended notifications on the lock screen...
CVE-2017-7058
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. The issue involves the "Notifications" component. It allows physically proximate attackers to read unintended notifications on the lock screen...
CVE-2017-7058: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. The issue involves the "Notifications" component. It allows physically proximate attackers to read unintended notifications on the lock screen...
PT-2017-17479
Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.3.3 Description An issue in certain Apple products allows physically proximate attackers to read unintended notifications on the lock screen. The issue involves the Notifications component. Recommendations For iOS...
CVE-2017-11180
FineCMS through 2017-07-11 has stored XSS in the logging functionality, as demonstrated by an XSS payload in 1 the User-Agent header of an HTTP request or 2 the username entered on the login screen...
Cross site scripting
FineCMS through 2017-07-11 has stored XSS in the logging functionality, as demonstrated by an XSS payload in 1 the User-Agent header of an HTTP request or 2 the username entered on the login screen...