CVE-2024-27871

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. An app may be able to access protected user data...

CVE-2024-27871

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. An app may be able to access protected user data...

CVE-2024-27872

CVE-2024-27872 relates to macOS Sonoma 14.6 where improved validation of symlinks fixes a vulnerability that could allow an app to access protected user data. The underlying issue is a symlink handling weakness, and Apple’s advisory confirms the fix in Sonoma 14.6. Public references indicate the ...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma prior to version 14.6, which stems from an application that may be able to access protected user data...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Monterey versions prior to 12.7.6, which stems from an application that may be able to modify protected portions of the file syste...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sonoma prior to version 14.6, which originates from an application that may be able to modify protected portions of the file syste...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system from Apple Inc. developed for Mac computers. A security vulnerability exists in Apple macOS Sonoma prior to version 14.4, which originates from an application that may be able to modify protected portions of the file system...

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit, related to insecure management of privileges, allows attackers to compromise the integrity of protected information.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information...

PT-2024-22108

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions 13.6.7 and earlier macOS Monterey versions 12.7.5 and earlier macOS Sonoma versions 14.5 and earlier Description: A permissions issue was addressed with additional restrictions. An app may be able to modify protected...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Monterey versions prior to 12.7.6, which stems from an application that may be able to modify protected portions of the file syste...

PT-2024-29058 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.7.6 macOS versions prior to 13.6.8 macOS versions prior to 14.6 Description: An input validation issue was addressed with improved input validation, which may allow an app to modify protected parts of the file syste...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Monterey prior to version 12.7.6, which stems from an application that may be able to modify protected portions of the file system...

CVE-2024-1798 Tutor LMS – Migration Tool <= 2.2.0 - Missing Authorization in tutor_lp_export_xml

The Tutor LMS – Migration Tool plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the tutorlpexportxml function in all versions up to, and including, 2.2.0. This makes it possible for unauthenticated attackers to export courses, including privat...

CVE-2024-7007

Positron Broadcast Signal Processor TRA7005 v1.20 is vulnerable to an authentication bypass exploit that could allow an attacker to have unauthorized access to protected areas of the application...

PT-2024-5255 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insufficient access control, allowing a remote attacker to disclose protected information. Recommendations: At the moment, there is no...

The vulnerability of the File Protocol Handler component in Cisco Webex Teams software allows attackers to disclose protected information.

The vulnerability of the File Protocol Handler component in Cisco Webex Meetings and Teams software lies in the lack of protection for sensitive data. Exploiting this vulnerability allows a malicious actor to disclose confidential information through a specially crafted link...

The vulnerability of the microprogramming software for RUGGEDCOM ROS, related to the disclosure of system data by unauthorized parties in the controlled area, allows a intruder to disclose protected information.

The vulnerability of the microprogramming software of RUGGEDCOM ROS relates to the disclosure of system data within the controlled area. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...

The vulnerability of the Logger Module in the Dell Software Repository Manager allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Logger Module in the Dell Repository Manager exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to information...

The vulnerability of the SQL engine of the Dell Data Analytics Engine (DDAE) in the Dell Data Lakehouse data storage platform allows a hacker to disclose protected information.

The vulnerability of the SQL engine of the Dell Data Analytics Engine DDAE in the Dell Data Lakehouse data storage platform is related to the lack of data encryption measures. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

The vulnerabilities of the event monitoring, threat detection, and security analytics platforms of the IBM QRadar Suite, as well as the IBM Cloud Pak for Security security platform, stem from the storage of protected information in unencrypted form. This allows attackers to exploit these vulnerabilities to disclose protected information.

The vulnerabilities of event monitoring platforms, threat detection systems, security analytics, and IBM QRadar Suite, as well as IBM Cloud Pak for Security, are related to the storage of protected information in unencrypted form. Exploiting these vulnerabilities can allow attackers to gain...