PT-2023-8478 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: The issue is related to errors in security settings of the App Sandbox technology in the macOS operating system, which may allow an attacker to exit the isolated software environment and disclose...

PT-2023-27435 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: A permissions issue was addressed with additional restrictions, which may have allowed an app to access sensitive user data. Recommendations: For versions prior to 14, update to macOS Sonoma 14 to resol...

PT-2023-18987 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: A permissions issue was addressed with improved redaction of sensitive information. This issue allows an app to potentially access sensitive user data. Recommendations: For versions prior to 14, update ...

PT-2023-27447 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17 iPadOS versions prior to 17 Description: The issue allows an app to potentially access sensitive user data due to improper handling of caches. This has been addressed with improved cache handling. Recommendations: For...

PT-2023-27448 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: tvOS versions prior to 17 iOS versions prior to 17 iPadOS versions prior to 17 watchOS versions prior to 10 macOS Sonoma versions prior to 14 Description: A permissions issue was addressed with improved validation, which may have allowed an a...

PT-2023-23748 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: Apple tvOS versions prior to 17 Apple iOS versions prior to 17 Apple iPadOS versions prior to 17 Apple watchOS versions prior to 10 Apple macOS versions prior to Sonoma 14 Description: The issue was addressed with improved handling of caches...

Apple iOS and iPadOS Security Vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS 17 and iPadOS 17, which arises from an application that may be able to access...

CVE-2023-43458

Cross Site Scripting XSS vulnerability in Resort Reservation System v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the room, name, and description parameters in the manageroom function...

CVE-2023-43458

Cross Site Scripting XSS vulnerability in Resort Reservation System v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the room, name, and description parameters in the manageroom function...

CVE-2023-1636

A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenStack services. If any service is...

SUSE SLES12: libpython3_6m1_0 / libpython3_6m1_0-32bit / python36 / etc (SUSE-SU-2023:3731-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3731-1 advisory. - CVE-2023-40217: Fixed TLS handshake bypass on closed sockets bsc1214692. Tenable has extracted the preceding description block directly fr...

Vulnerabilities fixed in Autodesk AutoCad

Autodesk has fixed vulnerabilities in several products of AutoCad. A malicious party could exploit the vulnerabilities to cause a denial-of-service, execute code with privileges of the user, or to gain access to sensitive data in the scope of the application. Successful exploitation requires the...

Vulnerabilities fixed in Hewlett Packard OneView

Hewlett Packard has fixed vulnerabilities in OneView. A malicious party could exploit the vulnerabilities to bypass authentication bypass authentication to gain unauthenticated access to sensitive data within the application, or use the application. HPE has released updates to fix the...

The vulnerability in the Firefox web browser, related to the use of memory after it is freed, allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Firefox web browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

Vulnerabilities fixed in Jenkins

Vulnerabilities have been fixed in Jenkins. A malicious party can exploit the vulnerabilities to launch attacks that can result in the following categories of damage: Cross-Site Request Forgery XSRF. Cross-Site Scripting XSS. Manipulation of data Circumvention of security measure Remote code...

CVE-2023-38887

File Upload vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to execute arbitrary code and obtain sensitive information via the extension filtering and renaming functions...

UBUNTU-CVE-2023-38888

Cross Site Scripting vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the REST API module, related to analyseVarsForSqlAndScriptsInjection and testSqlAndScriptInject...

Dolibarr Cross-Site Scripting Vulnerability

Dolibarr is a software application. A modern software package that helps manage your organization's activities. A cross-site scripting vulnerability exists in Dolibarr ERP CRM v.17.0.1 and prior versions, which originates from a vulnerability that could allow a remote attacker to obtain sensitive...

The vulnerability of the software for controlling protection devices and monitoring power systems, SEL-5036 acSELerator Bay Screen Builder, is related to deficiencies in path name limitation. This allows attackers to access confidential information.

The vulnerability of the software for controlling protection devices and monitoring power systems, SEL-5036 acSELerator Bay Screen Builder, is related to deficiencies in path name limitation. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

The vulnerability of the bfd_getl32 function in the GNU Binutils development environment, which allows an attacker to gain read, modify, or delete access to data, or to cause a service denial.

The vulnerability of the bfdgetl32 function in the GNU Binutils development toolset’s libbfd.c file is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain read, modify, or delete access to data, or cause...