Lucene search
+L

1892 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/24 12:00 a.m.•5 views

CVE-2021-30931: Undefined Security Weakness

A logic issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. A malicious application may be able to disclose kernel memory...

7.1CVSS5.7AI score0.0089EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/24 12:00 a.m.•4 views

CVE-2021-30988: Undefined Security Weakness

Description: A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.2 and iPadOS 15.2. A malicious application may be able to identify what other applications a user has installed...

5.5CVSS5.7AI score0.0072EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/08/24 12:00 a.m.•16 views

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems from the U.S.-based Apple Inc. developed specifically for Mac computers. Apple macOS Monterey 12.0.1 previously had a security vulnerability where a malicious application could elevate privileges...

7.8CVSS7.3AI score0.00777EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/24 12:00 a.m.•5 views

CVE-2021-30892: Incorrect Permission Assignment for Critical Resource

An inherited permissions issue was addressed with additional restrictions. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A malicious application may be able to modify protected parts of the file system...

5.5CVSS5.9AI score0.10269EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/24 12:00 a.m.•6 views

CVE-2021-30861: Undefined Security Weakness

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1. A malicious application may bypass Gatekeeper checks...

5.5CVSS5.7AI score0.01224EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/24 12:00 a.m.•6 views

CVE-2021-30990: Undefined Security Weakness

A logic issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious application may bypass Gatekeeper checks...

5.5CVSS5.7AI score0.00981EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/08/24 12:00 a.m.•10 views

PT-2021-8247 · Apple · Macos Monterey +2

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.1 macOS Big Sur versions prior to 11.6.2 Description: A logic issue was addressed with improved state management, allowing a malicious application to bypass Privacy preferences. This issue may lead to data leakage. ...

5.5CVSS5.9AI score0.14781EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
•added 2021/08/24 12:00 a.m.•9 views

PT-2021-5239 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.0.1 macOS Big Sur versions prior to 11.6.1 macOS Catalina versions prior to Security Update 2021-007 Description: The issue is related to an inherited permissions problem, which may allow a malicious application to...

5.5CVSS6.7AI score0.10269EPSS
SaveExploits0References14
NVD
NVD
•added 2021/08/03 8:15 p.m.•14 views

CVE-2021-30580

Insufficient policy enforcement in Android intents in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious application to obtain potentially sensitive information via a crafted HTML page...

6.5CVSS0.01341EPSS
SaveExploits0References5
OSV
OSV
•added 2021/08/03 8:15 p.m.•11 views

CVE-2021-30580

Insufficient policy enforcement in Android intents in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious application to obtain potentially sensitive information via a crafted HTML page...

6.5CVSS5.2AI score
SaveExploits0References5
OSV
OSV
•added 2021/08/03 8:15 p.m.•13 views

UBUNTU-CVE-2021-30580

Insufficient policy enforcement in Android intents in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious application to obtain potentially sensitive information via a crafted HTML page...

6.5CVSS6.4AI score0.01341EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2021/08/03 7:41 p.m.•36 views

CVE-2021-30580

Insufficient policy enforcement in Android intents in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious application to obtain potentially sensitive information via a crafted HTML page...

6.5CVSS6.4AI score0.01341EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2021/08/03 7:41 p.m.•81 views

CVE-2021-30580

Insufficient policy enforcement in Android intents in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious application to obtain potentially sensitive information via a crafted HTML page...

6.5CVSS6.4AI score0.01341EPSS
SaveExploits0
CNNVD
CNNVD
•added 2021/07/21 12:00 a.m.•19 views

macOS 安全漏洞

Apple macOS is a set of specialized operating systems developed for Mac computers by the American company Apple Apple. The macOS suffers from a security vulnerability that stems from the fact that a malicious application may be able to access data from an account where the user is using Home...

5.5CVSS5.8AI score0.00634EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/07/21 12:00 a.m.•3 views

PT-2021-18881

Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.5 Description A permissions issue was addressed with improved validation. A malicious application may be able to access a user’s recent Contacts. Recommendations For macOS Big Sur versions prior to 11.5, upda...

4.3CVSS0.00798EPSS
SaveExploits0References6
Apple
Apple
•added 2021/07/19 12:00 a.m.•306 views

About the security content of watchOS 7.6

About the security content of watchOS 7.6 This document describes the security content of watchOS 7.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.3CVSS9.6AI score0.21859EPSS
SaveExploits2References1Affected Software1
Apple
Apple
•added 2021/07/19 12:00 a.m.•215 views

About the security content of tvOS 14.7

About the security content of tvOS 14.7 This document describes the security content of tvOS 14.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.3CVSS9.6AI score0.21859EPSS
SaveExploits2References1Affected Software1
CNVD
CNVD
•added 2021/07/08 12:00 a.m.•18 views

Google Android System elevation of privilege vulnerability (CNVD-2021-52343)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the System component of Google Android versions 8.1, 9, 10, and 11, which can be exploited by an attacker to allow...

7.2CVSS6.8AI score0.00134EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/07/05 12:00 a.m.•18 views

Qualcomm 芯片资源管理错误漏洞

The Qualcomm MDM9640 and others are products of Qualcomm Incorporated USA.The MDM9640 is a central processing unit CPU product.The MDM9650 is a central processing unit CPU product.The MSM8996AU is a central processing unit CPU product. A resource management error vulnerability exists in Qualcomm...

8.4CVSS8.3AI score0.00166EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2021/06/17 9:15 p.m.•72 views

CVE-2021-32694 Malicious Android application can crash the Nextcloud Android Client

Nextcloud Android app is the Android client for Nextcloud. In versions prior to 3.15.1, a malicious application on the same device is possible to crash the Nextcloud Android Client due to an uncaught exception. The vulnerability is patched in version 3.15.1...

4.1CVSS5.5AI score0.00967EPSS
SaveExploits1References3
Rows per page
Query Builder