CVE-2023-23523

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. Photos belonging to the Hidden Photos Album could be viewed without authentication through Visual Lookup...

CVE-2023-23523

CVE-2023-23523 affects Apple devices where Photos in the Hidden Photos Album could be viewed without authentication via Visual Lookup due to a logic issue. The issue is fixed in macOS Ventura 13.3 and in iOS/iPadOS 16.4. The NVD entry notes a local attack vector with user interaction required, an...

CVE-2023-23533

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4. An app may be able to modify protected parts of the file system...

CVE-2023-27962

CVE-2023-27962 refers to a logic issue in macOS PackageKit where an app may be able to modify protected parts of the file system. The referenced Apple advisories indicate the fix is included in macOS Big Sur 11.7.5, macOS Monterey 12.6.4, and macOS Ventura 13.3. Affected products are macOS versio...

CVE-2023-28178

CVE-2023-28178 is a logic-issue vulnerability in Apple platforms where an app may bypass Privacy preferences due to insufficient validation. The issue is addressed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, and watchOS 9.4. The CVSS-like metrics indicate Lo...

CVE-2023-21102

In efirtasmwrapper of efi-rt-wrapper.S, there is a possible bypass of shadow stack protection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...

Design/Logic Flaw

The myMail app through 14.30 for iOS sends cleartext credentials in a situation where STARTTLS is expected by a server...

Design/Logic Flaw

IBM UrbanCode Deploy UCD versions up to 7.3.0.1 could disclose sensitive password information during a manual edit of the agentrelay.properties file. IBM X-Force ID: 240148...

Design/Logic Flaw

An issue was discovered in the Linux kernel before 6.1.11. In net/netrom/afnetrom.c, there is a use-after-free because accept is also allowed for a successfully connected AFNETROM socket. However, in order for an attacker to exploit this, the system must have netrom routing configured or the...

Design/Logic Flaw

llvm-project commit 6c01b5c was discovered to contain a segmentation fault via the component mlir::Type::getDialect...

Design/Logic Flaw

llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::spirv::TargetEnv::TargetEnvmlir::spirv::TargetEnvAttr...

Design/Logic Flaw

llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::Type::isamlir::LLVM::LLVMVoidType...

Design/Logic Flaw

llvm-project commit a0138390 was discovered to contain an assertion failure at !replacements.countop && "operation was already replaced...

Design/Logic Flaw

llvm-project commit bd456297 was discovered to contain a segmentation fault via the component mlir::Block::getArgument...

Design/Logic Flaw

llvm-project commit a0138390 was discovered to contain a segmentation fault via the component matchAndRewriteSortOpmlir::sparsetensor::SortOp...

Design/Logic Flaw

Semcms Shop v4.2 was discovered to contain an arbitrary file uplaod vulnerability via the component SEMCMSUpfile.php. This vulnerability allows attackers to execute arbitrary code via uploading a crafted PHP file...

Design/Logic Flaw

In NanoMQ v0.15.0-0, a Heap overflow occurs in copynutf8str function of mqttparser.c...

Design/Logic Flaw

In NanoMQ v0.15.0-0, Heap overflow occurs in readbyte function of mqttcode.c...

Design/Logic Flaw

IBM i 7.2, 7.3, 7.4, and 7.5 could allow an authenticated privileged administrator to gain elevated privileges in non-default configurations, as a result of improper SQL processing. By using a specially crafted SQL operation, the administrator could exploit the vulnerability to perform additional...

Privilege escalation

Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation. A failure in the update logic of Rancher's admission Webhook may lead to the misconfiguration of the Webhook. This component enforces validation rules and security checks before resources are admitted into th...