CVE-2024-44134

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15. An app may be able to read sensitive location information...

CVE-2024-40838

CVE-2024-40838 describes a privacy issue in macOS Sequoia 15 where sensitive data was moved to a protected location, potentially allowing a malicious app to access notifications from the user’s device. The NVD/NVD-derived entries confirm the issue is fixed in macOS Sequoia 15, with an impact prof...

CVE-2024-44181

The CVE-2024-44181 entry concerns macOS: an issue in handling of temporary files could allow an app to read sensitive location information. Affected products/versions are macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. The root cause is improved handling of temporary files (as descri...

CVE-2024-44181

An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to read sensitive location information...

CVE-2024-44170

A privacy issue was addressed by moving sensitive data to a more secure location. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, watchOS 11. An app may be able to access user-sensitive data...

PT-2024-30975 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15 Description: The issue allows an app to potentially read sensitive location information due to inadequate redaction of sensitive data. This was addressed with improved redaction of sensitive information...

PT-2024-22079 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15 Description: A privacy issue allowed an app to potentially read sensitive location information due to inadequate private data redaction for log entries. Recommendations: For versions prior to 15, update to macOS...

Windows Escalate UAC Execute RunAs Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Escalate UAC Execute RunAs', 'Description' = %q This module will attempt to elevate execution level using the ShellExecute undocumented...

WebOb's location header normalization during redirect leads to open redirect

...

CVE-2024-42425

Dell Precision Rack, 14G Intel BIOS versions prior to 2.22.2, contains an Access of Memory Location After End of Buffer vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2024-42425

The CVE-2024-42425 entry relates to Dell Precision Rack BIOS (14G) with Intel BIOS versions prior to 2.22.2. The vulnerability is an Access of Memory Location After End of Buffer, enabling a low-privilege local attacker to cause information disclosure by reading memory after a buffer boundary. Af...

NewStart CGSL MAIN 6.02 : curl Multiple Vulnerabilities (NS-SA-2024-0050)

The remote NewStart CGSL host, running version MAIN 6.02, has curl packages installed that are affected by multiple vulnerabilities: - The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPTFOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow...

SUSE-SU-2024:3163-1 Security update for gradle

This update for gradle fixes the following issues: - CVE-2023-35946: Fixed a dependency issue leading the cache to write files into an unintended location. bsc1212930...

CVE-2024-34661

Improper handling of insufficient permissions in Samsung Assistant prior to version 9.1.00.7 allows remote attackers to access location data. User interaction is required for triggering this vulnerability...

CVE-2024-34661

Improper handling of insufficient permissions in Samsung Assistant prior to version 9.1.00.7 allows remote attackers to access location data. User interaction is required for triggering this vulnerability...

CVE-2024-34661

CVE-2024-34661 concerns Samsung Assistant prior to version 9.1.00.7, where improper handling of insufficient permissions allows remote attackers to access location data with user interaction required to trigger. Affected software is Samsung Assistant; vulnerability arises from insufficient permis...

CVE-2024-34661

Improper handling of insufficient permissions in Samsung Assistant prior to version 9.1.00.7 allows remote attackers to access location data. User interaction is required for triggering this vulnerability...

CVE-2024-34661

Improper handling of insufficient permissions in Samsung Assistant prior to version 9.1.00.7 allows remote attackers to access location data. User interaction is required for triggering this vulnerability...

PT-2024-31733

Name of the Vulnerable Software and Affected Versions: SolarWinds Serv-U affected versions not specified Description: The issue is a directory traversal vulnerability where remote code execution is possible depending on the privileges given to the authenticated user. This problem requires the use...

PT-2024-26082 · Samsung · Samsung Assistant

Name of the Vulnerable Software and Affected Versions: Samsung Assistant versions prior to 9.1.00.7 Description: The issue is related to the improper handling of insufficient permissions in Samsung Assistant, allowing remote attackers to access location data. User interaction is required for...