4310 matches found
How to Add a Permanent Search Domain Entry in the Resolv.conf File of a XenServer Host
This article describes how to add a permanent search domain entry in the resolv.conf file of a XenServer Host. When manually editing the resolv.conf file to add search domains, the entries are not persistent after a XenServer Host reboot...
PT-2023-8364 · Apple · Ios +2
Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.1 iOS versions prior to 17.1 iPadOS versions prior to 17.1 Description: A privacy issue was addressed with improved private data redaction for log entries. This issue may allow an app to access sensitive user...
PT-2023-8362 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.7.1 Description: A privacy issue was addressed with improved private data redaction for log entries. This issue may allow an app with root privileges to access private information. The vulnerability is related to...
Improper access control
Improper access control in the permission inheritance in Devolutions Server 2022.3.13.0 and earlier allows an attacker that compromised a low privileged user to access entries via a specific combination of permissions in the entry and in its parent...
CVE-2023-41065
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to read sensitive location information...
PT-2023-26653 · Unknown · Economizzer
Name of the Vulnerable Software and Affected Versions: Economizzer version 0.9-beta1 Description: A remote code execution vulnerability exists via an insecure file upload. A malicious attacker can upload a PHP web shell as an attachment when adding a new cash book entry, allowing them to execute...
CVE-2023-41065
CVE-2023-41065 describes a privacy issue where private data redaction in log entries could allow an app to read sensitive location information. The issue is fixed in multiple Apple platforms: tvOS 17, iOS 17, iPadOS 17, watchOS 10, and macOS Sonoma 14. The NVD entry rates it as Low risk (CVSS v3....
CVE-2023-41065
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to read sensitive location information...
Debian DSA-5503-1 : netatalk - security update
The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5503 advisory. Multiple security issues were discovered in Netatalk, an implementation of the Apple Filing Protocol AFP for offering file service mainly to macOS clients, which...
PT-2023-30489 · Unknown +1 · Openharmony +1
Name of the Vulnerable Software and Affected Versions: OpenHarmony versions 3.2.1 and prior Description: The issue is related to a system call function usage error and an mqueue undetected entries vulnerability in the liteos-a kernel. Local attackers can crash the kernel by providing error input...
kernel: Linux kernel iavf driver: Denial of Service via use-after-free vulnerability
A flaw was found in the Linux kernel's iavf driver. A local user with administrative capabilities can exploit a use-after-free vulnerability, caused by a mismatch in network interface NAPI list management functions. This can lead to dangling NAPI entries, resulting in a kernel crash and a Denial ...
CVE-2023-40442
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.8. An app may be able to read sensitive location information...
Information disclosure
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.8. An app may be able to read sensitive location information...
CVE-2023-40442
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.8. An app may be able to read sensitive location information...
CVE-2023-40442
The CVE-2023-40442 issue affects Apple platforms (iOS, iPadOS, macOS) where privacy data could be exposed via log entries containing sensitive location information. Root cause: inadequate redaction of private data in logs. Impact: information disclosure risk on affected builds. Affected versions ...
CVE-2023-40392
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.5. An app may be able to read sensitive location information...
CVE-2023-40392
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.5. An app may be able to read sensitive location information...
CVE-2023-40392
The CVE-2023-40392 entry concerns a privacy issue in macOS where an app may be able to read sensitive location information due to inadequate redaction in log entries. The Red Hat/Apple/NVD entries align on: affected platform is macOS, specifically macOS Ventura 13.5 and earlier in the context of ...
XSS vulnerability in Jenkins Job Configuration History Plugin
Jenkins Job Configuration History Plugin 1227.v7a79fc4dc01f and earlier does not property sanitize or escape the timestamp value from history entries when rendering a history entry on the history view, resulting in a stored cross-site scripting XSS vulnerability...