999 matches found
About the security content of tvOS18.2
About the security content of tvOS18.2 This document describes the security content of tvOS 18.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Rece...
python_book 安全漏洞
pythonbook is an online book lending website, book management system by Tim Green, an individual developer. A security vulnerability exists in pythonbook version V1.0, which stems from an access control error. An attacker can exploit the vulnerability to obtain sensitive information about users...
CVE-2024-49770 oak's path traversal allows transfer of hidden files within the served root directory
oak is a middleware framework for Deno's native HTTP server, Deno Deploy, Node.js 16.5 and later, Cloudflare Workers and Bun. By default oak does not allow transferring of hidden files with Context.send API. However, prior to version 17.1.3, this can be bypassed by encoding / as its URL encoded...
CVE-2024-44175
This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.1. An app may be able to access sensitive user data...
CVE-2024-44175
A vulnerability exists in macOS due to insufficient validation of symlinks . This flaw could allow an application to gain unauthorized access to sensitive user data . The issue has been addressed in macOS Sequoia 15 and macOS Sonoma 14.7.1 . Proof-of-concept evidence for this vulnerability has be...
CVE-2024-40855
CVE-2024-40855 affects macOS (the specific entry notes a sandboxed app could access sensitive user data). The connected sources confirm the issue was addressed with improved checks and implemented as a fix in macOS Ventura 13.7.1, macOS Sequoia 15, and macOS Sonoma 14.7.1. The description does no...
CVE-2024-40855
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, visionOS 2. A sandboxed app may be able to access sensitive user data...
CVE-2024-44278
An information disclosure issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 18.1 and iPadOS 18.1, iOS 17.7.1 and iPadOS 17.7.1, macOS Ventura 13.7.1, macOS Sonoma 14.7.1, watchOS 11.1, visionOS 2.1. A sandboxed app may be able to access sensitive...
CVE-2024-44278
Apple fixed an information disclosure vulnerability affecting private data redaction in system logs. The issue could let a sandboxed app access sensitive user data in logs. Affects iOS/iPadOS 18.1, 17.7.1; macOS Ventura 13.7.1, Sonoma 14.7.1; watchOS 11.1; visionOS 2.1. Remediation: patch version...
Apple macOS 安全漏洞
Apple macOS is a specialized operating system developed for Mac computers by Apple, Inc. A security vulnerability exists in Apple macOS version 13.7.1, which stems from an application that may be able to access sensitive user data...
CVE-2024-40855: Incorrect Authorization
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, visionOS 2. A sandboxed app may be able to access sensitive user data...
PT-2024-31115 · Apple · Macos Sequoia +1
Name of the Vulnerable Software and Affected Versions: macOS Sequoia versions prior to 15.1 Description: A privacy issue was addressed with improved private data redaction for log entries. An app may be able to access sensitive user data. Recommendations: For macOS Sequoia versions prior to 15.1,...
Apple visionOS 安全漏洞
Apple visionOS is an operating system for AR glasses from Apple USA. A security vulnerability exists in Apple visionOS version 2.1, which stems from the fact that users may be able to view sensitive user information...
Apple macOS 安全漏洞
Apple macOS is a specialized operating system developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 13.7.1, which stems from an application that may be able to access sensitive user data...
CVE-2024-44205
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. A sandboxed app may be able to access sensitive user data in system lo...
CVE-2024-44205
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. A sandboxed app may be able to access sensitive user data in system lo...
CVE-2024-44205
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A sandboxed app may be able to access sensitive user data in system lo...
CVE-2024-44205
CVE-2024-44205 describes a privacy issue where a sandboxed app may access sensitive user data in system logs. The vendor-fixed versions are: macOS Ventura 13.6.8, macOS Monterey 12.7.6, macOS Sonoma 14.6, iOS 16.7.9 and iPadOS 16.7.9, and iOS 17.6 and iPadOS 17.6. The NVD/NVD-derived entry notes ...