Siemens Industrial Products

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Mozilla Firefox < 126.0

The version of Firefox installed on the remote Windows host is prior to 126.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-21 advisory. - Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of these bugs showed...

CVE-2024-27835

This issue was addressed through improved state management. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access to an iOS device may be able to access notes from the lock screen...

CVE-2024-27835

CVE-2024-27835 affects Apple iOS and iPadOS where notes could be accessed from the lock screen due to a state-management issue in the Notes component. Root cause: improved state management in the affected UI path. Impact: local attacker with physical access could view notes on a locked device. Re...

CVE-2024-27803

A permissions issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5. An attacker with physical access may be able to share items from the lock screen...

PT-2024-4837 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.5 iPadOS versions prior to 17.5 Description: The issue is related to a permissions problem in the Screenshots component of iPadOS and iOS, which is connected to errors in security settings. An attacker with physical...

PT-2024-4832 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.5 iPadOS versions prior to 17.5 Description: The issue allows an attacker with physical access to potentially access contacts from the lock screen due to a lack of protection for certain data. This is related to the...

Apple iOS 和 iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for the iPad tablet computer. Apple iOS and iPadOS contain a security vulnerability. An attacker could use this vulnerability to share items...

PT-2024-4836 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.5 iPadOS versions prior to 17.5 Description: The issue is related to errors in security settings of the Notes component in iOS and iPadOS, allowing an attacker with physical access to the device to potentially access...

Apple iOS 和 iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for the iPad tablet computer. Apple iOS and iPadOS contain a security vulnerability. An attacker could use this vulnerability to access note...

macOS 13.x < 13.6.7 Multiple Vulnerabilities (HT214107)

The remote host is running a version of macOS / Mac OS X that is 13.x prior to 13.6.7. It is, therefore, affected by multiple vulnerabilities: - A logic issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.1. An attacker with knowledge of a standard user's...

RHEL 6 : screen (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - screen: crash when processing combining chars CVE-2021-26937 - socket.c in GNU Screen through 4.9.0, when...

RHEL 7 : screen (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - screen: allows sending SIGHUP to arbitrary PIDs CVE-2023-24626 Note that Nessus has not tested for this issue but h...

RHEL 6 : gdm (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - gdm: lock screen bypass when timed login is enabled CVE-2019-3825 - gdm: inability to timely contact...

EulerOS 2.0 SP10 : xorg-x11-server (EulerOS-SA-2024-1582)

According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroy...

CVE-2024-20855

Improper access control vulnerability in multitasking framework prior to SMR May-2024 Release 1 allows physical attackers to access unlocked screen for a while...

CVE-2024-20855

The vulnerability CVE-2024-20855 affects the multitasking framework (Samsung Mobile devices) with improper access control. Versions prior to SMR May-2024 Release 1 allow physical attackers to access an unlocked screen for a period of time. Remediation: update to SMR May-2024 Release 1 or later. N...

PT-2024-18765 · Unknown · Multitasking Framework

Name of the Vulnerable Software and Affected Versions: multitasking framework versions prior to SMR May-2024 Release 1 Description: The issue is related to improper access control in the multitasking framework, allowing physical attackers to access an unlocked screen for a period of time...

ROS-20240507-01

Vulnerability of ANSI Escape Sequence Handler component of WinRAR file archiver is related to errors in input data processing. input data processing errors. Exploitation of the vulnerability could allow an attacker acting remotely, cause a denial of service or tamper with screen output...

RXSA-2024:1607 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: vmwgfx: NULL pointer dereference in vmwcmddxdefinequery CVE-2022-38096 kernel: Out of boundary write in perfreadgroup as result of overflow a perfevent's readsize CVE-2023-6931 kernel: GS...