May 1, 2019—KB4501835 (OS Build 17763.439)

None None...

April 25, 2019—KB4493462 (Preview of Monthly Rollup)

None None...

April 25, 2019—KB4493443 (Preview of Monthly Rollup)

None None...

April 25, 2019—KB4493460 (Preview of Monthly Rollup)

None None...

[SECURITY] Fedora 29 Update: jackson-datatype-joda-2.9.8-1.fc29

This is a Jackson module that aims to provide full support for data types of Joda date-time library...

FreeBSD : shibboleth-sp -- crashes on malformed date/time content (4f8665d0-0465-11e9-b77a-6cc21735f730)

The Shibboleth Consortium reports : SAML messages, assertions, and metadata all commonly contain date/time information in a standard XML format. Invalid formatted data in such fields cause an exception of a type that was not handled properly in the V3 software and causes a crash usually to the...

shibboleth-sp -- crashes on malformed date/time content

The Shibboleth Consortium reports: SAML messages, assertions, and metadata all commonly contain date/time information in a standard XML format. Invalid formatted data in such fields cause an exception of a type that was not handled properly in the V3 software and causes a crash usually to the shi...

CVE-2017-14727

logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffer is not initialized...

Buffer overflow

logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffer is not initialized...

weechat -- crash in logger plugin

WeeChat reports: security problem: a crash can happen in logger plugin when converting date/time specifiers in file mask...

June 13, 2017—KB4022725 (OS Build 15063.413 and 15063.414)

None None...

GStreamer Denial of Service Vulnerability (CNVD-2017-01488)

GStreamer is a set of frameworks for handling streaming media. A denial of service vulnerability exists in the gstdatetimenewfromiso8601string function in GStreamer gst/gstdatetime.c. A remote attacker can cause a denial of service out-of-bounds heap read via a malformed datetime string...

CVE-2017-5838

The gstdatetimenewfromiso8601string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds heap read via a malformed datetime string...

U.S. Dept Of Defense: SQLi in LASCO CME Query

A SQL injection vulnerability was discovered in the "CME DateTime" parameter on the LASCO CME Query form. The vulnerability allows an attacker to execute arbitrary SQL commands on the server...

The vulnerability of the Mac OS X operating system, which allows a hacker to determine the user’s location

The vulnerability of the Date & Time Pref Pane component in the Mac OS X operating system arises due to errors in the processing of the GlobalPreferences file. Exploiting this vulnerability allows a malicious actor to determine the user’s location through a specially created application...

CVE-2016-4715

The Date & Time Pref Pane component in Apple OS X before 10.12 mishandles the .GlobalPreferences file, which allows attackers to discover a user's location via a crafted app...

Code injection

The Date & Time Pref Pane component in Apple OS X before 10.12 mishandles the .GlobalPreferences file, which allows attackers to discover a user's location via a crafted app...

CVE-2016-4715

CVE-2016-4715 concerns the Date & Time Pref Pane in macOS OS X before 10.12. A crafted application can abuse the handling of the .GlobalPreferences file to disclose the user’s location. The entry is tied to a local attack vector with user interaction required, and the impact is described as infor...

macOS < 10.12 Multiple Vulnerabilities

The remote host is running a version of Mac OS X that is prior to 10.10.5, 10.11.x prior to 10.11.6, or is not macOS 10.12. It is, therefore, affected by multiple vulnerabilities in the following components : - apache - apachemodphp - Apple HSSPI Support - AppleEFIRuntime - AppleMobileFileIntegri...

PYSEC-2015-11

The getformat function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as demonstrated by SECRETKEY...