PT-2024-29430 · Cadclick · Cadclick

Name of the Vulnerable Software and Affected Versions: CADClick versions 1.11.0 and earlier Description: A SQL Injection issue in "ccHandler.aspx" allows remote attackers to execute arbitrary SQL commands via the bomid parameter. This enables attackers to potentially access or manipulate sensitiv...

Advisory ROSA-SA-2024-2496

Software: cups 2.2.6 OS: ROSA Virtualization 2.1 packageevrstring: cups-2.2.6-60.rv3 CVE-ID: CVE-2023-32324 BDU-ID: 2023-03873 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the formatlogline function of the CUPS print server is related to writing beyond buffer boundaries. Exploitation of the...

CVE-2024-44860

Solvait v24.4.2 contains an information-disclosure vulnerability in the /Letter/PrintQr/ endpoint that allows an attacker to access sensitive data via a crafted request. Affected component: Solvait software (version 24.4.2). Root cause details are not specified in the provided documents. Impact i...

CVE-2023-51157

Cross Site Scripting vulnerability in ZKTeco WDMS v.5.1.3 Pro allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script to the Emp Name parameter...

CVE-2024-44182

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to access sensitive data logged when a shortcut fails to launch another app...

CVE-2024-44131

This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to access sensitive user data...

CVE-2024-44153

The issue was addressed with improved permissions logic. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. An app may be able to access user-sensitive data...

CVE-2024-40850

A file access issue was addressed with improved input validation. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, tvOS 18, visionOS 2, watchOS 11. An app may be able to access user-sensitive data...

CVE-2024-40847

The issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to access sensitive user data...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS version 13.7, which stems from an application that may be able to access sensitive user data...

CVE-2024-40842

An issue was addressed with improved validation of environment variables. This issue is fixed in macOS Sequoia 15. An app may be able to access user-sensitive data...

CVE-2024-44182

CVE-2024-44182 (Apple macOS) describes a local vulnerability where an app may access sensitive data logged when a shortcut fails to launch another app. Remediation is to upgrade affected macOS releases to macOS Ventura 13.7, macOS Sonoma 14.7, or macOS Sequoia 15, where the issue has been address...

CVE-2024-44182

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to access sensitive data logged when a shortcut fails to launch another app...

CVE-2024-40790

The issue was addressed with improved handling of caches. This issue is fixed in visionOS 2. An app may be able to read sensitive data from the GPU memory...

CVE-2024-40790

CVE-2024-40790 affects Apple visionOS 2. The vulnerability stems from cache handling allowing an app to read sensitive data from GPU memory. Apple’s documentation states this is fixed in visionOS 2; remediation is updating to visionOS 2. No exploitation details are provided in the supplied docume...

CVE-2024-44184

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to access user-sensitive data...

CVE-2024-44184

CVE-2024-44184 is a permissions-related issue in Apple platforms. The vulnerability could allow an app to access user-sensitive data. Fixes are provided in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15, and iOS/iPadOS 17.7 and 18. No exploit details are provided in the connected documen...

CVE-2024-44184

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to access user-sensitive data...

CVE-2024-40850

CVE-2024-40850 describes a file access issue corrected by improved input validation. The vulnerability affects multiple Apple platforms and versions, including macOS Ventura 13.7; iOS 17.7 and iPadOS 17.7; visionOS 2; watchOS 11; macOS Sequoia 15; iOS 18 and iPadOS 18; macOS Sonoma 14.7; and tvOS...

CVE-2024-40847

CVE-2024-40847 affects macOS: fixed via added code-signing restrictions in macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. The issue could allow an app to access sensitive user data, addressed by the patch. Connected sources (NVD/Red Hat/NCSC/Nessus/OpenVAS) reiterate the same remedi...