4157 matches found
CVE-2024-44127
This issue was addressed through improved state management. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18. Private Browsing tabs may be accessed without authentication...
Apple iOS 和 iPadOS 安全漏洞
Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 18 and iPadOS version 18, which can be exploited to access the Privat...
CVE-2024-44202: Improper Authentication
An authentication issue was addressed with improved state management. This issue is fixed in Safari 18, iOS 18 and iPadOS 18. Private Browsing tabs may be accessed without authentication...
Apple iOS 安全漏洞
Apple iOS is an operating system developed by Apple Inc. for mobile devices. A security vulnerability exists in Apple iOS version 17.7 and iPadOS version 17.7, which originates from accessing the Private Browsing tab without authentication...
CVE-2024-44127: Improper Authentication
This issue was addressed through improved state management. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18. Private Browsing tabs may be accessed without authentication...
CVE-2024-44202
CVE-2024-44202 affects Safari Private Browsing on Apple iOS 18 and iPadOS 18. It is described as an authentication issue where Private Browsing tabs could be accessed without authentication. Root cause cited as issues with state management and its remediation is described as resolved by improved ...
CVE-2024-44202
An authentication issue was addressed with improved state management. This issue is fixed in iOS 18 and iPadOS 18. Private Browsing tabs may be accessed without authentication...
CVE-2024-44202
An authentication issue was addressed with improved state management. This issue is fixed in Safari 18, iOS 18 and iPadOS 18. Private Browsing tabs may be accessed without authentication...
CVE-2024-44127
This issue was addressed through improved state management. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18. Private Browsing tabs may be accessed without authentication...
CVE-2024-44127
CVE-2024-44127 : A privacy issue in Apple iOS/iPadOS where Private Browsing tabs could be accessed without authentication due to state-management weaknesses. The CVE is addressed in updates: iOS 17.7 and iPadOS 17.7, and iOS 18/iPadOS 18. Mitigations include applying these updates to prevent unau...
CVE-2024-44127
This issue was addressed through improved state management. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18. Private Browsing tabs may be accessed without authentication...
PT-2024-31035
Name of the Vulnerable Software and Affected Versions iOS versions prior to 18 iPadOS versions prior to 18 Description An authentication issue was addressed with improved state management, allowing Private Browsing tabs to be accessed without authentication. The issue has been exploited publicly...
PT-2024-30968 · Apple · Ios +1
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.7 iPadOS versions prior to 17.7 Description: The issue allows Private Browsing tabs to be accessed without authentication. This was addressed through improved state management. Recommendations: For iOS versions prior ...
The vulnerability of the Service Workers service in the private browsing mode of the Firefox web browser relates to an improper limitation on the visible layers of the user interface. This allows a malicious actor to gain access to confidential data.
The vulnerability of the Service Workers service in the private browsing mode of the Firefox web browser is related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data...
VulnCheck KEV: CVE-2024-45195
Apache OFBiz contains a forced browsing vulnerability that allows a remote attacker to obtain unauthorized access...
PT-2024-10287 · Unknown · File Entity
Name of the Vulnerable Software and Affected Versions: File Entity versions 7.X- before 7.X-2.39 Description: The issue allows for the insertion of sensitive information into sent data, enabling forceful browsing. This can lead to the disclosure of protected information. The estimated number of...
Viessmann Climate Solutions SE Vitogate 300
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : Viessmann Climate Solutions SE Equipment : Vitogate 300 Vulnerabilities : Use of Hard-coded Credentials, Forced Browsing, Command Injection 2. RISK EVALUATION...
NewStart CGSL MAIN 6.02 : webkit2gtk3 Multiple Vulnerabilities (NS-SA-2024-0053)
The remote NewStart CGSL host, running version MAIN 6.02, has webkit2gtk3 packages installed that are affected by multiple vulnerabilities: - A use-after-free issue was found in the AudioSourceProviderGStreamer class of WebKitGTK and WPE WebKit in versions prior to 2.30.5. Processing maliciously...
K000141002: Apache OFBiz vulnerabilities CVE-2024-32113, CVE-2024-36104, and CVE-2024-45195
Security Advisory Description CVE-2024-32113 Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13. Users are recommended to upgrade to version 18.12.13, which fixes the issue. CVE-2024-36104...