F5 Networks BIG-IP : cURL vulnerability (K41523201)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.4.1 / 14.1.4.2 / 15.1.4 / 16.0.1.2 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K41523201 advisory. Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to...

F5 Networks BIG-IP : BIG-IP ASM and Advanced WAF WebSocket vulnerability (K18570111)

The version of F5 Networks BIG-IP installed on the remote host is prior to 12.1.5.3 / 13.1.3.5 / 14.1.3.1 / 15.1.2 / 16.0.1.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K18570111 advisory. - On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before...

F5 Networks BIG-IP : BIG-IP APM AD authentication vulnerability (K51213246)

The version of F5 Networks BIG-IP installed on the remote host is prior to 12.1.6 / 13.1.4 / 14.1.4 / 15.1.3 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K51213246 advisory. - On version 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x befor...

F5 Networks BIG-IP : TMM with HTTP/2 vulnerability ( (K90603426)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.3 / 16.0.1.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K90603426 advisory. - On BIG-IP version 16.0.x before 16.0.1.1 and 15.1.x before 15.1.3, malformed HTTP/2 requests may cause an...

F5 BIG-IP Found Vulnerable to Kerberos KDC Spoofing Vulnerability

Cybersecurity researchers on Wednesday disclosed a new bypass vulnerability CVE-2021-23008 in the Kerberos Key Distribution Center KDC security feature impacting F5 Big-IP application delivery services. "The KDC Spoofing vulnerability allows an attacker to bypass the Kerberos authentication to...

Vulnerabilities fixed in macOS

Apple has fixed a large number of vulnerabilities in Apple macOS Big Sur 11, Catalina 10.15 and Mojave 10.14. A malicious person can exploit the vulnerabilities to cause the following categories of damage cause: Circumvention of security measure. Remote code execution Administrator/Root rights...

Apple macOS多款产品 安全漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. The following products and versions of Apple macOS are affected by the security vulnerability: macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, and tvOS 14.5...

Apple Releases Security Updates

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the Apple security pages for the following products and apply the...

Apple macOS Big Sur路径遍历漏洞

Apple macOS Big Sur is a mobile application app from Apple Inc. Apple macOS Big Sur suffers from a path traversal vulnerability that affects the following products and versions: macOS 11.0 20A2411, 11.0.1 20B29, 11.0.1 20B50, 11.1 20C69, 11.2 20D64, 11.2.1 20D74, 11.2.1 20D75, 11.2.2 20D80, 11.2....

PT-2021-13591

Name of the Vulnerable Software and Affected Versions: macOS Catalina versions prior to Security Update 2021-002 macOS Mojave versions prior to Security Update 2021-003 iOS versions prior to 14.5 iPadOS versions prior to 14.5 watchOS versions prior to 7.4 tvOS versions prior to 14.5 macOS Big Sur...

PT-2021-13595

Name of the Vulnerable Software and Affected Versions: macOS Catalina versions prior to Security Update 2021-002 macOS Mojave versions prior to Security Update 2021-003 iOS versions prior to 14.5 iPadOS versions prior to 14.5 watchOS versions prior to 7.4 tvOS versions prior to 14.5 macOS Big Sur...

PT-2021-18789

Name of the Vulnerable Software and Affected Versions iOS versions prior to 14.5 iPadOS versions prior to 14.5 watchOS versions prior to 7.4 macOS Big Sur versions prior to 11.3 Description A validation issue was addressed with improved logic, which may allow a malicious application to leak...

PT-2021-13634

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 14.5 iPadOS versions prior to 14.5 watchOS versions prior to 7.4 macOS Big Sur versions prior to 11.3 Description: A logic issue was addressed with improved state management. The issue concerns muting a CallKit call whil...

PT-2021-13633

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 14.5 iPadOS versions prior to 14.5 macOS Big Sur versions prior to 11.3 Description: The issue involves an out-of-bounds read that has been addressed through improved input validation. A malicious application may be able...

PT-2021-13593

Name of the Vulnerable Software and Affected Versions: iTunes versions prior to 12.11.3 for Windows Security Update versions prior to 2021-002 for Catalina Security Update versions prior to 2021-003 for Mojave iCloud for Windows versions prior to 12.3 macOS Big Sur versions prior to 11.3 watchOS...

PT-2021-13621

Name of the Vulnerable Software and Affected Versions: macOS Big Sur versions prior to 11.3 Description: A logic issue was addressed with improved state management, which may allow a local attacker to elevate their privileges. Recommendations: For versions prior to 11.3, update to macOS Big Sur...

PT-2021-13626

Name of the Vulnerable Software and Affected Versions: macOS Big Sur versions prior to 11.3 Description: A logic issue was addressed with improved state management, which may have caused Locked Notes content to be unexpectedly unlocked. Recommendations: For versions prior to 11.3, update to macOS...

PT-2021-13616

Name of the Vulnerable Software and Affected Versions: macOS Big Sur versions prior to 11.3 macOS Catalina versions prior to Security Update 2021-002 macOS Mojave versions prior to Security Update 2021-003 Description: A memory corruption issue was addressed with improved validation. This issue m...

PT-2021-13637

Name of the Vulnerable Software and Affected Versions: macOS Big Sur versions prior to 11.3 Security Update versions prior to 2021-002 Catalina Security Update versions prior to 2021-003 Mojave Description: A use after free issue was addressed with improved memory management. Processing malicious...

PT-2021-18918

Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.3 Description A malicious unsandboxed app on a system with Remote Login enabled may bypass Privacy preferences. This issue was addressed by adding a new Remote Login option for opting into Full Disk Access fo...