CVE-2021-30720

CVE-2021-30720 is a logic issue in WebKit-based components (notably WebKitGTK/WebKit) that could allow a malicious website to access restricted ports on arbitrary servers. The vulnerability is fixed in Apple platforms as of tvOS 14.6, iOS 14.6, iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, and ...

CVE-2021-30699: Undefined Security Weakness

A window management issue was addressed with improved state management. This issue is fixed in iOS 14.6 and iPadOS 14.6. A user may be able to view restricted content from the lockscreen...

CVE-2021-30782: Undefined Security Weakness

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. A malicious application may be able to access restricted files...

CVE-2021-1809: Out-of-bounds Write

A memory corruption issue was addressed with improved validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A malicious application may be able to read restricted memory...

CVE-2021-1808: Out-of-bounds Write

A memory corruption issue was addressed with improved validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An application may be able to read restricted memory...

CVE-2021-30718: Undefined Security Weakness

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4. A non-privileged user may be able to modify restricted settings...

PT-2021-13604

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 14.5 iPadOS versions prior to 14.5 Description: The issue allows an application to permit shortcuts to access restricted files due to inadequate permissions logic. This has been addressed with improved permissions logic...

CVE-2021-1739: Improper Limitation of a Pathname to a Restricted Directory

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A local user may be able to modify...

CVE-2021-1831: Incorrect Default Permissions

The issue was addressed with improved permissions logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. An application may allow shortcuts to access restricted files...

PT-2021-18816

Name of the Vulnerable Software and Affected Versions iOS versions prior to 14.6 iPadOS versions prior to 14.6 Description A window management issue allowed a user to potentially view restricted content from the lock screen due to inadequate state management. Recommendations For iOS versions prio...

CVE-2021-30674: Undefined Security Weakness

This issue was addressed with improved checks. This issue is fixed in iOS 14.6 and iPadOS 14.6. A malicious application may disclose restricted memory...

PT-2021-18798

Name of the Vulnerable Software and Affected Versions iOS versions prior to 14.6 iPadOS versions prior to 14.6 Description A malicious application may disclose restricted memory due to an issue that has been addressed with improved checks. Recommendations For iOS versions prior to 14.6, update to...

CVE-2021-30720: Improper Authentication

A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. A malicious website may be able to access restricted ports on arbitrary servers...

CVE-2021-36717

Synerion TimeNet version 9.21 contains a directory traversal vulnerability where, on the "Name" parameter, the attacker can return to the root directory and open the host file. This might give the attacker the ability to view restricted files, which could provide the attacker with more informatio...

Directory traversal

Synerion TimeNet version 9.21 contains a directory traversal vulnerability where, on the "Name" parameter, the attacker can return to the root directory and open the host file. This might give the attacker the ability to view restricted files, which could provide the attacker with more informatio...

CVE-2021-36717

Synerion TimeNet version 9.21 contains a directory traversal vulnerability where, on the "Name" parameter, the attacker can return to the root directory and open the host file. This might give the attacker the ability to view restricted files, which could provide the attacker with more informatio...

CVE-2021-36717 Synerion TimeNet version 9.21 - Directory Traversal

Synerion TimeNet version 9.21 contains a directory traversal vulnerability where, on the "Name" parameter, the attacker can return to the root directory and open the host file. This might give the attacker the ability to view restricted files, which could provide the attacker with more informatio...

PT-2021-3925

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description Remote code execution is possible in MSHTML, the browser rendering engine used by Microsoft Internet Explorer and hosted within Microsoft Office documents. The issue stems from...

CVE-2021-37729: Improper Limitation of a Pathname to a Restricted Directory

A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software versions: Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.3, 8.6.0.9, 8.5.0.12, 8.3.0.16, 6.5.4.19, 6.4.4.25. Aruba has released patches for Aruba SD-WAN Software and Gateways and...

PT-2021-21321

Name of the Vulnerable Software and Affected Versions Synerion TimeNet version 9.21 Description The issue allows an attacker to perform a directory traversal attack using a web browser and some knowledge of default files and directories on the system. On the Name parameter, the attacker can retur...