CVE-2021-30987

CVE-2021-30987 describes an access-control issue in macOS Monterey 12.1 where a device may be passively tracked via BSSIDs. The vulnerability is disclosed in Apple advisory HT212978 and reflected in multiple sources (NVD entry and related vendor advisories). Affected product: macOS Monterey prior...

CVE-2021-30986

CVE-2021-30986 affects macOS Monterey before 12.1?The Apple advisory shows a device configuration issue that allowed a Bluetooth MAC address to be used to passively track a device. The issue is fixed in macOS Monterey 12.1. This CVE is associated with the Bluetooth component; remediation is an OS...

CVE-2021-30930

CVE-2021-30930 is a logic-issue vulnerability affecting Apple software (notably WebRTC/WebKit components) that could allow an attacker to track users via their IP address. Apple’s entry for macOS Monterey 12.0.1 lists this CVE as fixed, addressing the state-management/privacy risk. The NVD entry ...

CVE-2021-30930

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1. An attacker may be able to track users through their IP address...

CVE-2021-30866

CVE-2021-30866 is Apple’s privacy issue where broadcast WiFi MAC addresses were removed to prevent passive tracking. It affects tvOS 15, watchOS 8, iOS 15 and iPadOS 15, with the root cause being exposure of a device’s MAC address over a Wi‑Fi broadcast. The fix is the removal of the broadcast MA...

CVE-2021-30866

A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. A device may be passively tracked by its WiFi MAC address...

PT-2021-19025

Name of the Vulnerable Software and Affected Versions macOS versions prior to 12.1 Description An access issue was addressed with improved access restrictions. A device may be passively tracked via BSSIDs. Recommendations For versions prior to 12.1, update to macOS Monterey 12.1 to resolve the...

PT-2021-19024

Name of the Vulnerable Software and Affected Versions macOS versions prior to 12.1 Description A device configuration issue was addressed with an updated configuration. This issue allows a device to be passively tracked by its Bluetooth MAC address. Recommendations For versions prior to 12.1,...

PT-2021-7973

Name of the Vulnerable Software and Affected Versions macOS versions prior to 12.0.1 Description The issue is related to errors in state management, which can be exploited by a remote attacker to disclose protected information. It may also allow an attacker to track users through their IP address...

Apple macOS Permission Licensing and Access Control Vulnerabilities

Apple macOS is a suite of specialized operating systems developed by Apple Inc. for Mac computers. Apple macOS Monterey suffers from a privilege-granting and access-control issue vulnerability that stems from the fact that devices may be tracked via BSSID...

Apple macOS security vulnerabilities

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Monterey before 12.0.1. An attacker may be able to track users by their IP address...

Apple tvOS security vulnerabilities

Apple tvOS is a set of smart TV operating systems from the American company Apple Apple. A security vulnerability exists in several Apple products that could allow devices to be passively tracked by their WiFi MAC addresses. The issue was fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15...

CVE-2021-30986: Undefined Security Weakness

A device configuration issue was addressed with an updated configuration. This issue is fixed in macOS Monterey 12.1. A device may be passively tracked by its Bluetooth MAC address...

CVE-2021-30987: Incorrect Authorization

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.1. A device may be passively tracked via BSSIDs...

CVE-2021-30930: Undefined Security Weakness

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1. An attacker may be able to track users through their IP address...

CVE-2021-30866: Undefined Security Weakness

A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. A device may be passively tracked by its WiFi MAC address...

CVE-2020-25223

creationtimestamp| type| source ---|---|--- 2021-08-23 16:30:49+00:00| published-proof-of-concept| https://t.me/cKure/6727 2021-10-28 13:17:18+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/sophosutmwebadminsidcmdinjection.rb 2022-09-26...

CVE-2021-28641

creationtimestamp| type| source ---|---|--- 2021-08-20 22:23:49+00:00| seen| https://t.me/cibsecurity/27660 2024-11-14 06:09:41+00:00| seen| MISP/e630bb68-7110-4dfa-a675-91233b847bcd...

webTareas path traversal vulnerability

webTareas is a Web-based open source collaboration tool. The product supports project management, bug tracking, content management and meeting management. webTareas version 2.0 has a path traversal vulnerability, which stems from the fact that the extpath parameter in generalserv .php is not...

data-tracking (1.7.3) potentially affected by CVE-2021-35936 via apache-airflow (1.9.0)

apache-airflow PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - data-tracking 1.7.3 Source cves: CVE-2021-35936 Source advisory: OSV:PYSEC-2021-122...