6871 matches found
CVE-2024-44222
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Ventura 13.7.1, macOS Sonoma 14.7.1. An app may be able to read sensitive location information...
PT-2024-31051 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.1 macOS versions prior to 14.7.1 Description: The issue allows an app to potentially read sensitive location information due to inadequate redaction of sensitive information. Recommendations: For macOS versions...
Apple macOS 安全漏洞
Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS version 15, which originates from a malicious application with root privileges that may be able to access keyboard input and location information without user...
Apple macOS 安全漏洞
Apple macOS is a specialized operating system developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 13.7.1, which originates from an application that may be able to read sensitive location information...
PT-2024-31033 · Apple · Ios +2
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18.1 iPadOS versions prior to 18.1 Description: The issue allows an app to potentially read sensitive location information due to inadequate redaction of sensitive information. Recommendations: For iOS versions prior to...
Apple macOS 安全漏洞
Apple macOS is a specialized operating system developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 15, which originates from an application that may be able to read sensitive location information...
Apple macOS 安全漏洞
Apple macOS is a specialized operating system developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 13.7.1, which originates from an application that may be able to read sensitive location information...
PT-2024-31111 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.1 macOS versions prior to 14.7.1 Description: A privacy issue allowed an app to potentially read sensitive location information due to inadequate private data redaction for log entries. Recommendations: For macOS...
The Global Surveillance Free-for-All in Mobile Ad Data
Not long ago, the ability to digitally track someone’s daily movements just by knowing their home address, employer, or place of worship was considered a dangerous power that should remain only within the purview of nation states. But a new lawsuit in a likely constitutional battle over a New...
Adobe InDesign 16.0.0 < 16.4.0 Multiple Arbitrary code execution (APSB21-73) (macOS)
The version of Adobe InDesign installed on the remote macOS host is prior to 16.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-73 advisory. - Access of Memory Location After End of Buffer CWE-788 CVE-2021-40727 - Adobe InDesign versions 16.3 and earlier, a...
Adobe Character Animator 4.0.0 < 4.4.2 Multiple Vulnerabilities (APSB21-95) (macOS)
The version of Adobe Character Animator installed on the remote macOS host is prior to 4.4.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-95 advisory. - Adobe Character Animator version 4.4 and earlier is affected by a memory corruption vulnerability when...
Adobe Audition < 14.4.2 Multiple Vulnerabilities (APSB21-92) (macOS)
The version of Adobe Audition installed on the remote macOS host is prior to 14.4.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-92 advisory. - Adobe Audition version 14.4 and earlier is affected by a memory corruption vulnerability when parsing a M4A file,...
Adobe InDesign 16.0 < 17.0.0 Multiple Vulnerabilities (APSB21-107) (macOS)
The version of Adobe InDesign installed on the remote macOS host is prior to 17.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-107 advisory. - Adobe InDesign versions 16.4 and earlier are affected by a Buffer Overflow vulnerability when parsing a specially...
Microsoft Reveals macOS Vulnerability that Bypasses Privacy Controls in Safari Browser
Microsoft has disclosed details about a now-patched security flaw in Apple's Transparency, Consent, and Control TCC framework in macOS that has likely come under exploitation to get around a user's privacy preferences and access data. The shortcoming, codenamed HM Surf by the tech giant, is track...
JetBrains TeamCity Path Traversal Vulnerability
JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A path traversal vulnerability exists in JetBrains...
Malicious code in middleware-location-constraint (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9709 Malicious code in middleware-location-constraint (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2020-36835
The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to sensitive information disclosure of a WordPress site's database due to missing capability checks on the wpajaxwpvividaddremote AJAX action that allows low-level authenticated attackers to send back-ups to a remote...
CVE-2020-36835
The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to sensitive information disclosure of a site's database in versions up to and including 0.9.35 . The root cause is a missing capability check on the wp_ajax_wpvivid_add_remote AJAX action. This flaw allows low-level auth...
