15324 matches found
PT-2021-18918
Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.3 Description A malicious unsandboxed app on a system with Remote Login enabled may bypass Privacy preferences. This issue was addressed by adding a new Remote Login option for opting into Full Disk Access fo...
PT-2021-4728
Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.3 iOS versions prior to 14.5 iPadOS versions prior to 14.5 watchOS versions prior to 7.4 tvOS versions prior to 14.5 Description The issue is related to a buffer overflow due to a logic error, which may allow...
PT-2021-13640
Name of the Vulnerable Software and Affected Versions: macOS Big Sur versions prior to 11.3 watchOS versions prior to 7.4 Description: The issue allows arbitrary code execution when processing a maliciously crafted image. This is due to insufficient checks that have been improved in the fixed...
PT-2021-13628
Name of the Vulnerable Software and Affected Versions: macOS Big Sur versions prior to 11.3 Description: An issue existed in determining cache occupancy, which could allow a malicious website to track users by setting state in a cache. The issue was addressed through improved logic...
PT-2021-13623
Name of the Vulnerable Software and Affected Versions: macOS Big Sur versions prior to 11.3 Description: A logic issue was addressed with improved state management. A malicious website may be able to force unnecessary network connections to fetch its favicon. Recommendations: For macOS Big Sur...
About the security content of macOS Big Sur 11.3
About the security content of macOS Big Sur 11.3 This document describes the security content of macOS Big Sur 11.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...
About the security content of Xcode 12.5
About the security content of Xcode 12.5 This document describes the security content of Xcode 12.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
Ubuntu 18.04 LTS / 20.04 LTS : WebKitGTK vulnerabilities (USN-4894-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4894-1 advisory. A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a maliciou...
Vulnerabilities fixed in F5 BIG-IP
F5 has fixed several vulnerabilities in BIG-IP. A unauthenticated malicious party could potentially exploit them to cause a denial-of-service. F5 has released updates to fix the vulnerabilities. For more information, see: CVE-2021-22975: https://support.f5.com/csp/article/K21971977 CVE-2021-22977...
Uncaught Exception
Overview std/math/big is a Go standard library package std/math/big Affected versions of this package are vulnerable to Uncaught Exception. Go Vulnerability Report: A number of math/big.Int methods can panic when provided large inputs due to a flawed division method. Remediation Upgrade...
GO-2021-0069 Panic during division of very large numbers in math/big
A number of math/big.Int methods can panic when provided large inputs due to a flawed division method...
Exploit for Path Traversal in F5 Big-Ip_Access_Policy_Manager
CVE-2020-5902 Auto exploit...
How bitcoin payments unmasked a man who hired a Dark Web contract killer
An Italian citizens apparent attempt to hire a hitman on the Dark Web has been undone by clever analysis of his Bitcoin transactions. The man, who is reported to be an IT worker employed by a major corporation, is alleged to have paid the hitman to assassinate his former girlfriend. What happened...
F5 BIG-IP Denial of Service Vulnerability (CNVD-2021-29553)
F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A denial of service vulnerability exists in F5 BIG-IP, which can be exploited by an attacker to trigger a fatal error, thereby...
Unspecified Vulnerability in F5 BIG-IP (CNVD-2021-29554)
F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A security vulnerability exists in F5 BIG-IP that stems from not implementing any form of authentication using the Corosync...
F5 BIG-IP Denial of Service Vulnerability (CNVD-2021-29552)
F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A denial of service vulnerability exists in F5 BIG-IP, which can be exploited by an attacker to trigger a fatal error, thereby...
Security Bulletin: Infosphere BigInsights is affected by multiple IBM DB2 advisories (CVE-2014-8910, CVE-2015-1883, CVE-2015-1922, CVE-2015-1935).
Summary Security Bulletin: Infosphere BigInsights is affected by multiple IBM DB2 advisories CVE-2014-8910, CVE-2015-1883, CVE-2015-1922, CVE-2015-1935. The vulnerabilities exist in the Big SQL server component included in BigInsights. Vulnerability Details CVEID: CVE-2014-8910 DESCRIPTION: IBM D...
Security Bulletin: IBM InfoSphere BigInsights affected by vulnerability in Big SQL component (CVE-2015-1889)
Summary A security vulnerability has been identified in the Big SQL component of InfoSphere BigInsights that could allow a malicious user to gain unauthorized access to the HDFS data in the cluster. Vulnerability Details CVE-ID: CVE-2015-1889 DESCRIPTION: IBM InfoSphere BigInsights contains an...
Security Bulletin: Infosphere BigInsights is affected by a vulnerability in DB2 (CVE-2015-1947).
Summary Infosphere BigInsights is affected by a local escalation of privilege vulnerability in DB2 CVE-2015-1947. The vulnerability exists in the Big SQL server component included in BigInsights. Vulnerability Details CVEID: CVE-2015-1947 DESCRIPTION: IBM DB2 is vulnerable to a privilege escalati...