667 matches found
CVE-2017-13906
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan, macOS High Sierra 10.13. A malicious application may be able to elevate privileges...
CVE-2017-13892
An issue existed in the handling of Contact sharing. This issue was addressed with improved handling of user information. This issue is fixed in macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan. Sharing contact information may lead to unexpected...
CVE-2018-4478
A validation issue was addressed with improved logic. This issue is fixed in macOS High Sierra 10.13.5, Security Update 2018-003 Sierra, Security Update 2018-003 El Capitan. An attacker with physical access to a device may be able to elevate privileges...
CVE-2017-13905
A race condition was addressed with additional validation. This issue is fixed in tvOS 11.2, iOS 11.2, macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan, watchOS 4.2. An application may be able to gain elevated privileges...
Race condition
A race condition was addressed with additional validation. This issue is fixed in tvOS 11.2, iOS 11.2, macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan, watchOS 4.2. An application may be able to gain elevated privileges...
CVE-2017-13908
CVE-2017-13908 describes a permissions-validation issue in macOS where a local attacker could exploit SMB file permission handling to cause execution of non-executable text files. The root cause is insufficient validation during file permission handling, which could allow leveraging an SMB share ...
CVE-2018-4478
CVE-2018-4478 affects macOS High Sierra and related Security Updates. Description states a validation issue was addressed with improved logic, enabling elevation of privileges if exploited. It is fixed in macOS High Sierra 10.13.5, Security Update 2018-003 Sierra, and Security Update 2018-003 El ...
CVE-2017-13907
CVE-2017-13907 is a macOS vulnerability described as a state management issue where improved state validation fixes a problem that could cause the screen lock to remain unintentionally unlocked. According to the NVD entry, the fix is included in macOS High Sierra 10.13.1 and Security Updates 2017...
CVE-2021-41269
A flaw was found in cron-utils. This flaw allows an attacker to perform unauthenticated Remote Code Execution RCE via Java Expression Language EL injection...
Template Injection
cron-utils is vulnerable to template injection. An attacker can inject arbitrary java EL expressions through the parse function in CronParser.java, leading to remote code execution...
Critical vulnerability found in cron-utils
Impact A Template Injection was identified in cron-utils enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code Execution RCE vulnerability. Versions up to 9.1.2 are susceptible to this vulnerability. Please note, that only projects using the @Cron...
CVE-2021-41269
cron-utils is a Java library to define, parse, validate, migrate crons as well as get human readable descriptions for them. In affected versions A template Injection was identified in cron-utils enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code...
Remote code execution
cron-utils is a Java library to define, parse, validate, migrate crons as well as get human readable descriptions for them. In affected versions A template Injection was identified in cron-utils enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code...
CVE-2021-41269 Unauthenticated remote code injection in cron-utils
cron-utils is a Java library to define, parse, validate, migrate crons as well as get human readable descriptions for them. In affected versions A template Injection was identified in cron-utils enabling attackers to inject arbitrary Java EL expressions, leading to unauthenticated Remote Code...
el-cafe.es Improper Access Control vulnerability OBB-2265427
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
el-ton.ru Improper Access Control vulnerability OBB-2214634
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
el-news.de Improper Access Control vulnerability OBB-2162539
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
ai.hyacinth.framework:core-service-admin-server (=0.5.24), ai.hyacinth.framework:core-service-gateway-server (=0.5.24) +7438 more potentially affected by CVE-2021-28170 via org.glassfish:jakarta.el (>=3.0.2 <=3.0.3)
org.glassfish:jakarta.el MAVEN version =3.0.2, =1.4.2, =1.6.6, =j8.2.3.0, =j8.2.3.0, =j8.2.3.0, =j8.2.2.0, =2.1.11-RC2, =2.3.1.RELEASE - at.rechnerherz:aoprofiling =1.0.0 - at.rechnerherz:aoprofiling-autoconfigure =1.0.0 - at.rechnerherz:aoprofiling-spring-boot-starter =1.0.0 and more Source cves...
ai.hyacinth.framework:core-service-admin-server (>=0.5.2 <=0.5.21), ai.hyacinth.framework:core-service-gateway-server (>=0.5.2 <=0.5.21) +3919 more potentially affected by CVE-2021-28170 via org.glassfish:javax.el (>=3.0-b01 <=3.0.1-b12)
org.glassfish:javax.el MAVEN version =3.0-b01, =0.5.2, =0.5.2, =0.5.2, =0.18.5, =2.1.7.RELEASE, =6.1.0, =6.1.0, =6.1.0, =6.1.0, =1.0, =0.1-1, =0.1-16 and more Source cves: CVE-2021-28170 Source advisory: OSV:GHSA-V6W3-2PRQ-H95F...
com.github.ldeitos:extendedValidation-spring-boot-test-support (=2.0.0-Final), com.github.ldeitos:extendedValidation-test-support (>=0.9.3 <=2.0-RC2) +23 more potentially affected by CVE-2021-28170 via com.sun.el:el-ri (=1.0)
com.sun.el:el-ri MAVEN version =1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.sun.el:el-ri and may be impacted: - com.github.ldeitos:extendedValidation-spring-boot-test-support =2.0.0-Final - com.github.ldeitos:extendedValidation-test-support...