F5 BIG-IP 跨站脚本漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. An XSS vulnerability exists in the F5 BIG-IP TMUI, which can be exploited by attackers to run JavaScript in the context of th...

F5 BIG-IP输入验证错误漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. The F5 TMUI SCTP denial of service vulnerability could cause TMM to terminate when an SCTP profile with multiple paths is...

CVE-2021-30959: Buffer Copy without Checking Size of Input

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. Parsing a maliciously crafted audio file may lead to disclosure of user information...

CVE-2021-30972: Incorrect Authorization

This issue was addressed with improved checks. This issue is fixed in Security Update 2022-001 Catalina, macOS Big Sur 11.6.3. A malicious application may be able to bypass certain Privacy preferences...

CVE-2021-30969: Undefined Security Weakness

A path handling issue was addressed with improved validation. This issue is fixed in Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. Processing a maliciously crafted URL may cause unexpected JavaScript execution from a file on disk...

CVE-2021-30963: Buffer Copy without Checking Size of Input

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. Parsing a maliciously crafted audio file may lead to disclosure of user information...

CVE-2021-30899: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A malicious application may be able to execute arbitrary code with kernel privileges...

CVE-2021-30871: Undefined Security Weakness

This issue was addressed with a new entitlement. This issue is fixed in iOS 14.7, watchOS 7.6, macOS Big Sur 11.5. A local attacker may be able to access analytics data...

Apple macOS Big Sur 权限许可和访问控制问题漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. Apple macOS Big Sur suffers from a Privilege Permission and Access Control Issues vulnerability that stems from a logical issue resolved through improved authentication. The application can execute arbitrary code using kernel...

CVE-2021-30859: Access of Resource Using Incompatible Type

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Security Update 2021-005 Catalina. A malicious application may be able to execute arbitrary code with kernel privileges...

Apple macOS Big Sur 权限许可和访问控制问题漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. A vulnerability with privilege permission and access control issues exists in multiple Apple products that allows unprivileged applications to edit NVRAM variables. The vulnerability is fixed in the following products and versions:...

Apple macOS Big Sur 权限许可和访问控制问题漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. Apple macOS Big Sur suffers from a privilege-granting and access-control issue vulnerability that originates from a malicious application that could bypass Gatekeeper checks...

Apple macOS Big Sur 输入验证错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA Inc. Apple macOS Big Sur Help Viewer suffers from an input validation error vulnerability that originates from a maliciously created URL that could lead to the execution of JavaScript.The following products and versions are...

PT-2021-5239 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.0.1 macOS Big Sur versions prior to 11.6.1 macOS Catalina versions prior to Security Update 2021-007 Description: The issue is related to an inherited permissions problem, which may allow a malicious application to...

Apple macOS 竞争条件问题漏洞

Apple macOS Big Sur and Apple macOS Monterey are both products of Apple Inc.Apple macOS Big Sur is the 17th major release of macOS, Apple's operating system for the MAC.Apple macOS Monterey is the The 18th major release of macOS for the Macintosh desktop operating system macOS. A security...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. A buffer error vulnerability exists in multiple Apple products, where an attacker could potentially disclose memory contents via a maliciously crafted USD file. The vulnerability is fixed in the following products and versions: macOS...

Apple tvOS 输入验证错误漏洞

Apple tvOS is a set of smart TV operating systems from the American company Apple. An input validation error vulnerability exists in multiple Apple products, where a malicious application could elevate privileges. The vulnerability is fixed in the following products and versions: iOS 15.1 and...

PT-2021-18962 · Apple · Macos Monterey +5

Name of the Vulnerable Software and Affected Versions: macOS Big Sur versions prior to 11.6.1 macOS Monterey versions prior to 12.0.1 iOS versions prior to 15.1 iPadOS versions prior to 15.1 macOS Catalina versions without Security Update 2021-007 Description: An out-of-bounds read issue was...

PT-2021-18966 · Apple · Ipados +6

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.1 iPadOS versions prior to 15.1 macOS Monterey versions prior to 12.0.1 tvOS versions prior to 15.1 watchOS versions prior to 8.1 macOS Big Sur versions prior to 11.6.1 Security Update versions prior to 2021-007...

Apple macOS Big Sur 信息泄露漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. An information disclosure vulnerability exists in several Apple products, which can be exploited by a local attacker to view the desktop of a previously logged-in user via a fast user switching interface. The vulnerability is fixed i...