1710 matches found
CVE-2023-40428
The issue was addressed with improved handling of caches. This issue is fixed in iOS 17 and iPadOS 17. An app may be able to access sensitive user data...
CVE-2023-40428
The issue was addressed with improved handling of caches. This issue is fixed in iOS 17 and iPadOS 17. An app may be able to access sensitive user data...
CVE-2023-41070
A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access sensitive data logged when a user shares a link...
CVE-2023-41070
A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access sensitive data logged when a user shares a link...
PT-2023-18987 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: A permissions issue was addressed with improved redaction of sensitive information. This issue allows an app to potentially access sensitive user data. Recommendations: For versions prior to 14, update ...
PT-2023-27447 · Apple · Ios +1
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17 iPadOS versions prior to 17 Description: The issue allows an app to potentially access sensitive user data due to improper handling of caches. This has been addressed with improved cache handling. Recommendations: For...
CVE-2023-43458
Cross Site Scripting XSS vulnerability in Resort Reservation System v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the room, name, and description parameters in the manageroom function...
UBUNTU-CVE-2023-38888
Cross Site Scripting vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the REST API module, related to analyseVarsForSqlAndScriptsInjection and testSqlAndScriptInject...
About the security content of iOS 17 and iPadOS 17
About the security content of iOS 17 and iPadOS 17 This document describes the security content of iOS 17 and iPadOS 17. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
Vulnerabilities fixed in Zimbra
Zimbra has fixed vulnerabilities in Zimbra Collaboration. A malicious party can exploit the vulnerabilities to launch a Cross-Site Scripting XSS attack. Such an attack can lead to execution of arbitrary code in the browser of the victim, or access sensitive data in the context of the victim's...
Vulnerabilities fixed in Google Chrome
Google has fixed vulnerabilities in Chrome. A malicious person can exploit the vulnerabilities to circumvent security measures bypass security measures, execute arbitrary code in the context of the browser, or to gain access to sensitive data in the context of the browser. Google reports having...
Vulnerability fixed in FortiOS
Fortinet has fixed a vulnerability in FortiOS and FortiProxy. A malicious party could exploit the vulnerability to launch a Cross-Site Scripting attack. Such an attack can lead to execution of arbitrary code in the browser of the victim. Because the vulnerability is located in the guest-managemen...
Vulnerabilities fixed in Microsoft Windows
Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Remote code execution User rights Access to sensitive...
PT-2023-18740 · Samsung · Samsung Knox Sdk
Name of the Vulnerable Software and Affected Versions: Samsung Knox SDK versions 2.8.60 and earlier Description: The issue allows an attacker to bypass the authentication process and gain access to sensitive data. Recommendations: For Samsung Knox SDK versions 2.8.60 and earlier, at the moment,...
SPA-Cart eCommerce CMS 1.9.0.3 SQL Injection Vulnerability
Exploit Title: SPA-Cart eCommerce CMS 1.9.0.3 - SQL Injection Exploit Author: CraCkEr Vendor: SPA-Cart Vendor Homepage: https://spa-cart.com/ Software Link: https://demo.spa-cart.com/ Tested on: Windows 10 Pro Impact: Database Access CVE: CVE-2023-4548 CWE: CWE-89 - CWE-74 - CWE-707 Greetings...
PT-2023-19043 · Geomatika · Geomatika Isigeo Web
Name of the Vulnerable Software and Affected Versions: Geomatika IsiGeo Web version 6.0 Description: The issue allows remote authenticated users to obtain sensitive database content via SQL Injection. Recommendations: For Geomatika IsiGeo Web version 6.0, consider restricting access to sensitive...
Advisory ROSA-SA-2023-2215
Software: vim 8.0.1763 OS: ROSA Virtualization 2.1 packageevrstring: vim-8.0.1763-19.rv3.4.src.rpm CVE-ID: CVE-2022-0392 BDU-ID: 2022-00992 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the getexmodeline exgetln.c function of the vim text editor is related to writing beyond buffer boundaries in...
Vulnerabilities fixed in SAP products
SAP has fixed vulnerabilities in several products, including Business Objects, Netweaver and Powerdesigner. A malicious party can exploit the vulnerabilities to launch attacks that can lead to the following categories of damage: Cross-Site Scripting XSS. Denial-of-Service DoS. Bypassing...
Medium: linux-firmware
Issue Overview: An issue in "Zen 2" CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information. CVE-2023-20593 Affected Packages: linux-firmware Issue Correction: Run dnf update linux-firmware --releasever 2023.1.20230809 or dnf update...
PT-2023-26078 · Unknown · Maid Hiring Management System
Name of the Vulnerable Software and Affected Versions: Maid Hiring Management System version 1.0 Description: The issue is related to a SQL injection vulnerability found in the Search Maid page. This vulnerability could potentially allow unauthorized access to sensitive data. Recommendations: For...