About the security content of macOS Sonoma 14.1

About the security content of macOS Sonoma 14.1 This document describes the security content of macOS Sonoma 14.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases ar...

Apple macOS Security Breach

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma version 14.1, which originates from the fact that an attacker with physical access rights may be able to use Siri to access sensitive user data...

PT-2023-28610 · Apple · Macos Sonoma +1

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.1 Description: A logic issue was addressed with improved checks, which may have allowed an attacker to access user data. Recommendations: For macOS Sonoma versions prior to 14.1, update to version 14.1 to...

PT-2023-8352 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.1 Description: The issue is related to insufficient access control in the LaunchServices component of the macOS operating system, which may allow an app to access sensitive user data. The issue was addressed with...

About the security content of watchOS 10.1

About the security content of watchOS 10.1 This document describes the security content of watchOS 10.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...

The vulnerability of the Compiler component of the Oracle GraalVM for JDK allows a hacker to gain access to read, modify, add, or delete data.

The vulnerability of the Compiler component of the Oracle GraalVM for JDK lies in insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to read, modify, add, or delete data...

Apple macOS Security Breach

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Ventura version 13.6.1, which stems from an application that may be able to access protected user data...

PT-2023-28618 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.7.1 macOS versions prior to 13.6.1 macOS versions prior to 14.1 Description: The issue was addressed with improved checks. An app may be able to access user-sensitive data. Recommendations: For macOS versions prior ...

PT-2023-30102 · Unknown · Phpgurukul Nipah Virus Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Nipah virus NiV Testing Management System version 1.0 Description: The issue allows a remote attacker to escalate privileges via a crafted request to the "new-user-testing.php" endpoint. This enables the attacker to potentially gai...

Apple macOS Security Breach

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma version 14.1, which stems from an application that may be able to access sensitive user data...

Apple macOS Log Information Disclosure Vulnerability

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma version 14.1, which stems from an application that may be able to access sensitive user data...

Line Security Breach

Line is an instant messaging platform from Line, Inc. Line suffers from a security vulnerability that originates in the applet rmc R Beauty CLINIC Line version v.13.6.1 which allows remote attackers to obtain sensitive information via a crafted GET request...

About the security content of iOS 17.1 and iPadOS 17.1

About the security content of iOS 17.1 and iPadOS 17.1 This document describes the security content of iOS 17.1 and iPadOS 17.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

The vulnerability of the Web Server component of the Oracle BI Publisher software, which is used for creating reports, allows a malicious individual to gain access to read, modify, add, or delete data.

The vulnerability of the Web Server component of the Oracle BI Publisher software for creating reports is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain read, modify, add, or delete access to data...

Oracle Linux 8 : php:8.0 (ELSA-2023-5927)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-5927 advisory. libzip php 8.0.30-1 - rebase to 8.0.30 - Resolves: RHEL-11946 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip Tenable has extracted t...

Deserialization Of Untrusted Data

org.apache.inlong: manager-pojo is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to filterSensitive function in MySQLSinkDTO.java not properly sanitizing whitespace characters, especially the horizontal tab \t, in URL parameters, which allows these characters to bypass...

Advisory ROSA-SA-2023-2268

software: vim 9.0.1572 WASP: ROSA-CHROME packageevrstring: vim-9.0.1572-1.src.rpm CVE-ID: CVE-2023-0049 BDU-ID: 2023-00068 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the buildstlstrhl buffer.c function of the Vim text editor is related to an operation exceeding buffer boundaries in memory...

The vulnerability of the CORBA software platform component of Oracle Java SE allows a perpetrator to gain read, modify, add, or delete access to data.

The vulnerability of the CORBA software platform of Oracle Java SE is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain read, modify, add, or delete access to data remotely...

The vulnerability of the Hotspot component in the Java SE software platform and Oracle GraalVM Enterprise Edition and Oracle GraalVM for JDK virtual machines allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the Hotspot component in the Java SE software platform and the Oracle GraalVM Enterprise Edition and Oracle GraalVM for JDK virtual machines is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain...

The vulnerability of the Requisition and Vacancy component of the Oracle iRecruitment software platform, a part of the Oracle E-Business Suite, allows a malicious individual to gain access to read, modify, or delete data.

The vulnerability of the Requisition and Vacancy component of the Oracle iRecruitment software platform, a part of the Oracle E-Business Suite, involves insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain access to read, modify, or delete data usin...