CVE-2024-23287

CVE-2024-23287 concerns a privacy issue in Apple platforms where improved handling of temporary files fixes a vulnerability that could allow an app to access user-sensitive data. Affected products/versions (per provided documents): macOS Sonoma 14.4, iOS 17.4, iPadOS 17.4, watchOS 10.4. The entry...

CVE-2024-23252

CVE-2024-23252 is rejected; this CVE entry is not an active vulnerability.

CVE-2024-23226

CVE-2024-23226 affects Apple OS stack and is about improper memory handling during processing of web content, leading to arbitrary code execution. Connected advisories corroborate the issue and note fixes in macOS Sonoma 14.4, visionOS 1.1, iOS 17.4, iPadOS 17.4, watchOS 10.4, and tvOS 17.4. The ...

CVE-2024-23230

CVE-2024-23230 affects macOS (Sonoma 14.4, Monterey 12.7.4, Ventura 13.6.5). The vulnerability is due to improper file handling, allowing an app to access sensitive user data. Fixes are included in the listed macOS releases: Sonoma 14.4, Monterey 12.7.4, Ventura 13.6.5. No exploitation details ar...

CVE-2024-23266

The CVE-2024-23266 issue affects macOS where an app may modify protected parts of the file system. Affected platform versions and patch: macOS Sonoma 14.4, macOS Monterey 12.7.4, and macOS Ventura 13.6.5 contain the fix (improved checks). The description across sources notes the fix but does not ...

CVE-2024-23289

CVE-2024-23289 affects Apple devices (iOS, iPadOS, macOS, watchOS) with a lock-screen issue where Siri could reveal private calendar data when physical access is available. Technical details across connected docs show affected versions and fixed releases: iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 an...

CVE-2024-23246

This CVE-2024-23246 affects Apple platforms where sandbox escapes were possible in the affected components. According to the public description, the issue was addressed by removing the vulnerable code and is fixed in macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, and iOS...

CVE-2024-23285

CVE-2024-23285 affects macOS Sonoma 14.4. The issue stems from insufficient handling of symlinks, allowing an app to create symlinks to protected regions of the disk. The vulnerability is addressed in macOS Sonoma 14.4 with the fix described as improved handling of symlinks. Impact is described a...

CVE-2024-23220

The CVE-2024-23220 issue affects Apple visionOS, iOS, and iPadOS Safari related to fingerprinting the user due to an issue in cache handling. The vulnerability arises from the Safari component (on Apple Vision Pro platforms) where improper cache handling could allow an app to fingerprint the user...

CVE-2023-28826

CVE-2023-28826 affects Apple platforms, where an application may access sensitive user data due to improved redaction of information. The issue is addressed in iOS/iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.1, and macOS Ventura 13.6.5. CVSSv3.1 vector: LOCAL access, LOW attack complexi...

CVE-2024-23277

CVE-2024-23277 concerns macOS Sonoma 14.4, iOS 17.4, and iPadOS 17.4. The vulnerability allows an attacker on a privileged network position to inject keystrokes by spoofing a keyboard. Apple’s security content indicates this issue is addressed in the 14.4/17.4 updates. The root cause is tied to k...

CVE-2024-23294

CVE-2024-23294 affects QuartzCore in macOS Sonoma 14.4. The vulnerability: processing malicious input may lead to code execution. Fix: Apple addressed this by removing the vulnerable code in Sonoma 14.4 (update notes reference QuartzCore issue and 14.4 patch).

CVE-2024-23257

Technical details about CVE-2024-23257 are not publicly provided in the supplied documents; monitor for updates.

CVE-2024-23201

CVE-2024-23201 is an Apple macOS/iOS vulnerability described as a permissions issue that, if exploited by an app, could cause a denial-of-service. The issue is fixed in macOS Monterey 12.7.4, macOS Ventura 13.6.5, macOS Sonoma 14.3, watchOS 10.3, tvOS 17.3, iOS 17.3, and iPadOS 17.3. Related docu...

CVE-2024-23260

CVE-2024-23260 affects macOS Sonoma before 14.4; root cause: removal of additional entitlements reduces access to user-sensitive data. Fixed in macOS Sonoma 14.4; impact: an app may be able to access user-sensitive data. No exploits detailed in provided sources.

CVE-2024-2282

CVE-2024-2282 affects boyiddha Automated-Mess-Management-System 1.0. The vulnerability is a SQL injection in the Login Page’s /index.php caused by manipulation of the useremail argument. Impact is high/critical per sources, with remote exploitation and public disclosure. Multiple connected source...

Cross site scripting

A vulnerability, which was classified as problematic, was found in Bdtask G-Prescription Gynaecology & OBS Consultation Software 1.0. Affected is an unknown function of the component OBS Patient/Gynee Prescription. The manipulation of the argument Patient Title/Full Name/Address/Cheif...

Cross site scripting

A vulnerability, which was classified as problematic, has been found in Bdtask G-Prescription Gynaecology & OBS Consultation Software 1.0. This issue affects some unknown processing of the file /Home/Index of the component Prescription Dashboard. The manipulation of the argument Title leads to...

Sql injection

A vulnerability classified as critical has been found in keerti1924 Online-Book-Store-Website 1.0. This affects an unknown part of the file /shop.php of the component HTTP POST Request Handler. The manipulation of the argument productname leads to sql injection. It is possible to initiate the...

CVE-2024-28753

CVE-2024-28753 affects RaspAP (raspap-webgui) up to version 3.0.9. The issue allows remote attackers to read the /etc/passwd file via a crafted request, revealing sensitive local user information. Root cause: likely an improper access path/authorization check that permits reading sensitive system...