Lucene search
+L

1829 matches found

OSV
OSV
added 2023/07/27 1:15 a.m.7 views

CVE-2023-32429

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. An app may be able to bypass Privacy preferences...

5.5CVSS5.7AI score0.00244EPSS
SaveExploits0References3
NVD
NVD
added 2023/07/27 1:15 a.m.16 views

CVE-2023-32429

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. An app may be able to bypass Privacy preferences...

5.5CVSS5.4AI score0.00244EPSS
SaveExploits0References3
Prion
Prion
added 2023/07/27 1:15 a.m.22 views

Design/Logic Flaw

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. An app may be able to bypass Privacy preferences...

1.9CVSS6AI score0.00244EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/27 12:30 a.m.14 views

CVE-2023-32429

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. An app may be able to bypass Privacy preferences...

6.2AI score0.00244EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/07/27 12:30 a.m.28 views

CVE-2023-32429

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. An app may be able to bypass Privacy preferences...

6.4AI score0.00244EPSS
SaveExploits0References3
CVE
CVE
added 2023/07/27 12:30 a.m.277 views

CVE-2023-32429

Technical details about CVE-2023-32429 are not provided in the connected documents. Available info mentions macOS Ventura 13.5 fix and privacy-preference bypass, but there are no specifics on affected components, root cause, vectors, or remediation beyond the OS update.

5.5CVSS4.7AI score0.00244EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2023/07/24 12:0 a.m.10 views

Apple macOS Ventura 安全漏洞

Apple macOS Ventura is a desktop operating system from the American company Apple. A security bypass vulnerability exists in Apple macOS Ventura, which can be exploited by attackers to bypass privacy preferences...

5.5CVSS6.4AI score0.00244EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/07/24 12:0 a.m.7 views

PT-2023-5992 · Apple · Macos Monterey +3

Name of the Vulnerable Software and Affected Versions: macOS Big Sur versions 11.7.9 and earlier macOS Monterey versions 12.6.8 and earlier macOS Ventura versions 13.5 and earlier Description: This issue is related to the Privacy preferences component of macOS and is associated with the tracking ...

7.5CVSS6.7AI score0.01567EPSS
SaveExploits0References23
Positive Technologies
Positive Technologies
added 2023/07/24 12:0 a.m.7 views

PT-2023-26529 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.5 Description: An injection issue was addressed with improved input validation, allowing an app to potentially bypass certain Privacy preferences. Recommendations: For macOS versions prior to 13.5, update to macOS...

7.5CVSS6.9AI score0.01094EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2023/07/24 12:0 a.m.2 views

PT-2023-23788 · Apple · Macos Ventura +1

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.5 Description: The issue allows an app to bypass Privacy preferences. It was addressed with improved checks. Recommendations: For macOS Ventura versions prior to 13.5, update to macOS Ventura 13.5 to resolve...

5.5CVSS5.7AI score0.00244EPSS
SaveExploits0References12
Oracle linux
Oracle linux
added 2023/07/21 12:0 a.m.32 views

thunderbird security update

102.13.0-2.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build 102.13.0-2 - Update to 102.13.0 build2 102.13.0-1 - Update to 102.13.0 build1...

8.8CVSS7.1AI score0.00755EPSS
SaveExploits0
NVD
NVD
added 2023/07/06 2:15 p.m.22 views

CVE-2023-36995

TravianZ through 8.3.4 allows XSS via the Alliance tag/name, the statistics page, the link preferences, the Admin Logs, or the COOKUSR cookie...

6.1CVSS6.1AI score0.00473EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/07/06 2:15 p.m.11 views

CVE-2023-36995

TravianZ through 8.3.4 allows XSS via the Alliance tag/name, the statistics page, the link preferences, the Admin Logs, or the COOKUSR cookie...

6.1CVSS6.4AI score0.00473EPSS
SaveExploits1References2
Prion
Prion
added 2023/07/06 2:15 p.m.15 views

Design/Logic Flaw

TravianZ through 8.3.4 allows XSS via the Alliance tag/name, the statistics page, the link preferences, the Admin Logs, or the COOKUSR cookie...

5.8CVSS6AI score0.00473EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/07/06 12:0 a.m.21 views

CVE-2023-36995

TravianZ through 8.3.4 allows XSS via the Alliance tag/name, the statistics page, the link preferences, the Admin Logs, or the COOKUSR cookie...

6.1AI score0.00473EPSS
SaveExploits1References1
CVE
CVE
added 2023/07/06 12:0 a.m.43 views

CVE-2023-36995

CVE-2023-36995 affects TravianZ versions 8.3.4 and earlier. The vulnerability is a cross-site scripting (XSS) issue via multiple endpoints: Alliance tag/name, statistics page, link preferences, Admin Logs, and the COOKUSR cookie. Connected documents do not specify a remediation version or patch; ...

6.1CVSS5.9AI score0.00473EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2023/07/06 12:0 a.m.14 views

CVE-2023-36995

TravianZ through 8.3.4 allows XSS via the Alliance tag/name, the statistics page, the link preferences, the Admin Logs, or the COOKUSR cookie...

6.1CVSS6AI score0.00473EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2023/06/28 6:15 p.m.4 views

CVE-2023-21172

In multiple functions of WifiCallingSettings.java, there is a possible way to change calling preferences for the admin user due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS6.1AI score0.00097EPSS
SaveExploits0References2
Prion
Prion
added 2023/06/28 6:15 p.m.20 views

Design/Logic Flaw

In multiple functions of WifiCallingSettings.java, there is a possible way to change calling preferences for the admin user due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

4.3CVSS7.7AI score0.00097EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/06/28 12:0 a.m.9 views

CVE-2023-21172

In multiple functions of WifiCallingSettings.java, there is a possible way to change calling preferences for the admin user due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.1AI score0.00097EPSS
SaveExploits0References1
Rows per page
Query Builder