PT-2023-21426 · Apple · Macos Ventura +6

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.3 macOS Big Sur versions prior to 11.7.5 iOS versions prior to 16.4 iOS versions prior to 15.7.4 iPadOS versions prior to 16.4 iPadOS versions prior to 15.7.4 tvOS versions prior to 16.4 watchOS versions pri...

PT-2023-21432 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 macOS versions prior to 12.6.4 macOS versions prior to 11.7.5 Description: The issue was addressed with improved bounds checks. A remote user may be able to cause unexpected app termination or arbitrary code...

PT-2023-21437 · Apple · Macos Monterey +7

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.3 macOS Big Sur versions prior to 11.7.5 macOS Monterey versions prior to 12.6.4 iOS versions prior to 16.4 iPadOS versions prior to 16.4 tvOS versions prior to 16.4 watchOS versions prior to 9.4 Description...

PT-2023-19018 · Apple · Macos Monterey +6

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 macOS Big Sur versions prior to 11.7.5 iOS versions prior to 16.4 iOS versions prior to 15.7.4 iPadOS versions prior to 16.4 iPadOS versions prior to 15.7.4 macOS Monterey versions prior to 12.6.6 tvOS versions...

PT-2023-21454 · Apple · Macos Monterey +6

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 iOS versions prior to 16.4 iPadOS versions prior to 16.4 iOS versions prior to 15.7.4 iPadOS versions prior to 15.7.4 macOS Monterey versions prior to 12.6.4 watchOS versions prior to 9.4 macOS Big Sur versions...

Upgraded Q -> 3 from #74 [1679875886032]

Judge has assessed an item in Issue 74 as 3 risk. The relevant finding follows: Exchange Rate can be manipulated if positions are big enough for a long enough time --- The text was updated successfully, but these errors were encountered: All reactions...

PT-2023-21628 · Apple · Macos Monterey +5

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.3 macOS Monterey versions prior to 12.6.4 macOS Big Sur versions prior to 11.7.5 iOS versions prior to 15.7.4 iPadOS versions prior to 15.7.4 Description: A validation issue was addressed with improved input...

PT-2023-21441 · Apple · Macos Monterey +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 macOS Monterey versions prior to 12.6.4 macOS Big Sur versions prior to 11.7.5 iOS versions prior to 15.7.4 iPadOS versions prior to 15.7.4 Description: An out-of-bounds read issue was addressed with improved boun...

PT-2023-19017 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 macOS Big Sur versions prior to 11.7.5 Description: The issue was addressed with improved checks. Processing a maliciously crafted image may result in disclosure of process memory. Recommendations: For macOS...

PT-2023-21447 · Apple · Macos Monterey +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 macOS Monterey versions prior to 12.6.4 macOS Big Sur versions prior to 11.7.5 Description: The issue was addressed with improved checks. An archive may be able to bypass Gatekeeper. Recommendations: For macOS...

PT-2023-21433 · Apple · Macos Monterey +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 macOS Monterey versions prior to 12.6.4 macOS Big Sur versions prior to 11.7.5 iOS versions prior to 15.7.4 iPadOS versions prior to 15.7.4 Description: An out-of-bounds write issue was addressed with improved inp...

PT-2023-19010 · Apple · Macos Big Sur +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 macOS Big Sur versions prior to 11.7.5 iOS versions prior to 16.4 iPadOS versions prior to 16.4 Description: The issue allows an app to potentially gain root privileges due to inadequate checks. The estimated numb...

PT-2023-21436 · Apple · Macos Monterey +5

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 iOS versions prior to 15.7.4 iPadOS versions prior to 15.7.4 macOS Monterey versions prior to 12.6.4 macOS Big Sur versions prior to 11.7.5 Description: A validation issue was addressed with improved input...

PT-2023-21439 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 macOS versions prior to 12.6.4 macOS versions prior to 11.7.5 Description: The issue allows an app to potentially break out of its sandbox. This was addressed with a new entitlement. Recommendations: For macOS...

K000132725: FasterXML vulnerability CVE-2022-42004

Security Advisory Description In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer.deserializeFromArray to prevent use of deeply nested arrays. An application is vulnerable only with certain customized choices for...

golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service

An uncontrolled resource consumption flaw was found in Golang math/big. A too-short encoded message can cause a panic in Float.GobDecode and Rat.GobDecode in math/big in Go, potentially allowing an attacker to create a denial of service, impacting availability...

Important: Red Hat Security Advisory: Red Hat OpenStack Platform (etcd) security update

An update for etcd is now available for Red Hat OpenStack Platform. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

WordPress Big Store Theme <= 1.9.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software Big Store Type Theme Vulnerable versions = 1.9.3 Fixed in 1.9.4 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-27431 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 7ff26778242f Credits Dave Jong Patchstack...

K000132686: TLS Triple Handshake Attack vulnerability

Security Advisory Description The original TLS protocol includes a weakness in master secret negotiation, potentially allowing the Triple Handshake Attack that is mitigated by the Extended Master Secret EMS extension defined in RFC 7627. Impact This vulnerability may allow an unauthenticated...

CVE-2023-23513

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7.3, macOS Ventura 13.2, macOS Monterey 12.6.3. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution...