26153 matches found
Apple macOS Monterey 后置链接漏洞
Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. A security vulnerability exists in Apple macOS Monterey versions 12.0 21A344 - 12.3.1 21E258, which stems from a symbolic link issue in Spotlight. A local attacker can exploit the...
PT-2022-7003 · Apple +9 · Webkit +14
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.5 iPadOS versions prior to 15.5 macOS Monterey versions prior to 12.4 tvOS versions prior to 15.5 watchOS versions prior to 8.6 Description: A use after free issue was addressed with improved memory management. This...
Apple macOS Catalina 权限许可和访问控制问题漏洞
Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A vulnerability exists in Apple macOS Catalina prior to version 2022-004 in a privilege-granting and access-control issue, which stems from a security restriction incorrectly imposed in PackageKit. A...
PT-2022-18018 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.4 Description: The issue concerns the handling of environment variables, which has been addressed with improved validation. A user may be able to view sensitive user information due to this issue. Recommendations: F...
PT-2022-21473 · Apple · Apple Macos +3
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.4 macOS Big Sur versions prior to 11.6.6 macOS Catalina versions prior to Security Update 2022-004 Description: A logic issue was addressed with improved state management, which may allow an app to gain elevated...
Apple macOS 缓冲区错误漏洞
Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. The Apple macOS firmware suffers from a buffer error vulnerability that stems from a boundary error in the AMD firmware. An attacker exploiting this vulnerability could run a specially designed program to...
PT-2022-21463 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.4 Description: A logic issue was addressed with improved checks, which may allow an app to gain unauthorized access to Bluetooth. Recommendations: For versions prior to 12.4, update to macOS Monterey 12.4 to resolve...
Apple macOS 权限许可和访问控制问题漏洞
Apple macOS is a suite of specialized operating systems developed by Apple Inc. for Mac computers. A privilege permission and access control issue vulnerability exists in Apple macOS versions 11.0 20A2411 - 11.6.5 20G527, which stems from incorrectly imposed security restrictions in PackageKit. A...
GHSA-C4MC-49HQ-Q275 Puppet uses predictable filenames, allowing arbitrary file overwrite
Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise PE Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 uses predictable file names when installing Mac OS X packages from a remote source, which allows local users to overwrite arbitrary files or install arbitrary packages...
Puppet uses predictable filenames, allowing arbitrary file overwrite
Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise PE Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 uses predictable file names when installing Mac OS X packages from a remote source, which allows local users to overwrite arbitrary files or install arbitrary packages...
Covert Timing Channel in Apache CXF
The OAuth2 Hawk and JOSE MAC Validation code in Apache CXF prior to 3.0.13 and 3.1.x prior to 3.1.10 is not using a constant time MAC signature comparison algorithm which may be exploited by sophisticated timing attacks...
GHSA-F7CR-7C2C-FM8R OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor
The ironic-api service in OpenStack Ironic before 4.2.5 Liberty and 5.x before 5.1.2 Mitaka allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the...
OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor
The ironic-api service in OpenStack Ironic before 4.2.5 Liberty and 5.x before 5.1.2 Mitaka allows remote attackers to obtain sensitive information about a registered node by leveraging knowledge of the MAC address of a network card belonging to that node and sending a crafted POST request to the...
Google Chrome Security Update (stable-channel-update-for-desktop_10-2022-05) - Mac OS X
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
CWA for Mac 2203: Random Session disconnects
CWA for Mac will disconnect a session at random. Auto connect-back will also fail. SSL connection error - "status 43" will be reported in Citrix Viewer logs | 03-16-2022 | 10:17:48.817 | 2724 | 5 | sslasock.c | 1359 | SSLDecryptPacket | TCTD | TTERROR | doDecryptData failed. status: 43 | 03-16-20...
Google Releases Security Updates for Chrome
Google has released Chrome version 101.0.4951.64 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to take control of an affected system. CISA encourages users and administrators to review the Chrome Release Note and apply the necessary update. Thi...
CVE-2022-29394
TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the macAddress parameter in the function FUN0041b448...
CVE-2022-29394
TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the macAddress parameter in the function FUN0041b448...
