CVE-2018-4183

CVE-2018-4183 affects macOS High Sierra via the CUPS component. The issue is described as a sandbox bypass in CUPS that could occur due to profile misconfiguration, allowing a local process to interact with or modify CUPS behavior outside its sandbox. Public sources (NVD entry for CVE-2018-4183 a...

CVE-2018-4182

In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions on CUPS...

CVE-2018-4182

In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions on CUPS...

CVE-2018-4183

In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions...

CVE-2018-4182

CVE-2018-4182 – CUPS sandbox bypass in macOS High Sierra . The connected sources confirm a local vulnerability in CUPS on macOS High Sierra prior to 10.13.5, described as an access issue that was mitigated by adding sandbox restrictions to CUPS. The impact is limited to a local attacker who could...

CVE-2018-4183

In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions...

CVE-2017-13886

CVE-2017-13886 affects macOS High Sierra prior to 10.13.2, where an access issue existed with privileged Wi‑Fi system configuration. The description in the CVE entry and Apple’s security content confirms the vulnerability relates to Wi‑Fi configuration privileges and was addressed by introducing ...

CVE-2017-13886

In macOS High Sierra before 10.13.2, an access issue existed with privileged WiFi system configuration. This issue was addressed with additional restrictions...

CVE-2018-4183: Undefined Security Weakness

In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions...

CVE-2018-4182: Undefined Security Weakness

In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions on CUPS...

CVE-2017-13886: Undefined Security Weakness

In macOS High Sierra before 10.13.2, an access issue existed with privileged WiFi system configuration. This issue was addressed with additional restrictions...

PT-2019-7957

Name of the Vulnerable Software and Affected Versions macOS High Sierra versions prior to 10.13.2 Description An access issue existed with privileged WiFi system configuration. This issue was addressed with additional restrictions. Recommendations For macOS High Sierra versions prior to 10.13.2,...

SUSE-SU-2018:3987-1 Security update for kvm

This update for kvm fixes the following issues: Security issues fixed: - CVE-2018-10839: Fixed NE2000 NIC emulation support that is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use...

SUSE-SU-2018:3973-1 Security update for qemu

This update for qemu fixes the following issues: Security issues fixed: - CVE-2018-10839: Fixed NE2000 NIC emulation support that is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use...

Citrix Director error "403 Forbidden : access is denied"

When you try to access Director URL in the browser, there is an error displayed: Server Error - 403 - Forbidden: Access Denied...

Debian: Security Advisory (DSA-4340-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-19130

In Libav 12.3, there is an invalid memory access in vc1decodeframe in libavcodec/vc1dec.c that allows attackers to cause a denial-of-service via a crafted aac file. NOTE: This may be a duplicate of CVE-2017-17127...

Apple Mac OS X Security Updates (HT209193)-05

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Access and integrity issue within Eclipse Jetty

In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage of HttpSession details, it is possible for a malicious user to access/hijack other HttpSessions and even delete unmatched HttpSessions present in the FileSystem's...

GHSA-MWCX-532G-8PQ3 Access and integrity issue within Eclipse Jetty

In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage of HttpSession details, it is possible for a malicious user to access/hijack other HttpSessions and even delete unmatched HttpSessions present in the FileSystem's...