7308 matches found
Apple macOS Ventura Information Disclosure Vulnerability (CNVD-2023-61767)
Apple macOS Ventura is a desktop operating system from the American company Apple. Apple macOS Ventura suffers from an information disclosure vulnerability that can be exploited by attackers to access sensitive user data...
CVE-2023-32654
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.5. A user may be able to read information belonging to another user...
Apple Music for Android 安全漏洞
Apple macOS Ventura is a desktop operating system from the American company Apple. Apple macOS Ventura has an information disclosure vulnerability that can be exploited by an attacker to read information belonging to another user...
CVE-2023-38608
The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.5. An app may be able to access user-sensitive data...
CVE-2023-38259
A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. An app may be able to access user-sensitive data...
Esri ArcGIS Server Cross-Site Scripting Vulnerability
Esri ArcGIS Server is Esri's Web-oriented enterprise software platform for providing geolocation services. A cross-site scripting vulnerability exists in Esri ArcGIS Server that stems from the application's lack of effective filtering and escaping of user-supplied data; no details of the...
PT-2023-4211 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.7.9 macOS versions prior to 12.6.8 macOS versions prior to 13.5 Description: A logic issue was addressed with improved restrictions, which may allow an app to access user-sensitive data. The issue is related to the...
Apple macOS Ventura 安全漏洞
Apple macOS Ventura is a desktop operating system from the American company Apple. Apple macOS Ventura suffers from an information disclosure vulnerability that can be exploited by attackers to access sensitive user data...
CMS-Bank Mellat Payment Manager 1.0.0 Cross Site Scripting
==================================================================================================================================== | Title : CMS-Bank Mellat Payment Manager v1.0.0 Xss Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...
The vulnerability of the Sandbox component in operating systems such as iOS, iPadOS, tvOS, watchOS, and macOS allows attackers to gain access to confidential information.
The vulnerability of the Sandbox component in iOS, iPadOS, tvOS, watchOS, and macOS is related to authentication process errors. Exploiting this vulnerability can allow attackers to access confidential information and also retain user data...
CVE-2023-3459
The Export and Import Users and Customers plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'hfupdatecustomer' function called via an AJAX action in versions up to, and including, 2.4.1. This makes it possible for authenticated...
PT-2023-24936 · WordPress · Export/Import Users/Customers
Name of the Vulnerable Software and Affected Versions: Export and Import Users and Customers plugin for WordPress versions up to, and including, 2.4.1 Description: The issue is related to a missing capability check on the hf update customer function, which is called via an AJAX action. This allow...
PT-2023-24105 · WordPress · Crudlab Jazz Popups
Name of the Vulnerable Software and Affected Versions: CRUDLab Jazz Popups plugin versions 1.8.7 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially...
CVE-2023-2959
Authentication Bypass by Primary Weakness vulnerability in Oliva Expertise Oliva Expertise EKS allows Collect Data as Provided by Users. This issue affects Oliva Expertise EKS: before 1.2...
MyCompanyFiles Oliva Expertise EKS 授权问题漏洞
MyCompanyFiles Oliva Expertise EKS is a file management application from MyCompanyFiles, Inc. A security vulnerability exists in MyCompanyFiles Oliva Expertise EKS prior to version 1.2 that stems from an authentication bypass vulnerability that allows collection of user-supplied data...
Adobe ColdFusion Deserialization Vulnerability (CNVD-2024-25608)
Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion has a deserialization vulnerability that arises from unsafe deserialization of...
CVE-2023-37766
GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gfisomremoveuserdata function at /lib/libgpac.so...
DEBIAN-CVE-2023-37766
GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gfisomremoveuserdata function at /lib/libgpac.so...
