PT-2023-23784 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: A privacy issue was addressed with improved handling of temporary files. This issue allows an app to potentially observe unprotected user data. Recommendations: For versions prior to 14, update to macOS...

PT-2023-27435 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: A permissions issue was addressed with additional restrictions, which may have allowed an app to access sensitive user data. Recommendations: For versions prior to 14, update to macOS Sonoma 14 to resol...

PT-2023-27448 · Apple · Ipados +5

Name of the Vulnerable Software and Affected Versions: tvOS versions prior to 17 iOS versions prior to 17 iPadOS versions prior to 17 watchOS versions prior to 10 macOS Sonoma versions prior to 14 Description: A permissions issue was addressed with improved validation, which may have allowed an a...

PT-2023-8483 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: The issue is related to a lack of protection for service data in the printing component of the macOS operating system. This could allow an attacker to disclose protected information. An app may be able ...

PT-2023-27587 · Unknown · Lasso Simple Urls

Name of the Vulnerable Software and Affected Versions: Lasso Simple URLs plugin versions = 117 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to steal user da...

Apple macOS Security Breach

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma version 14, which stems from an application that may be able to observe unprotected user data...

Apple iOS and iPadOS Security Vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS 17 and iPadOS 17, which arises from an application that may be able to access...

PT-2023-23748 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: Apple tvOS versions prior to 17 Apple iOS versions prior to 17 Apple iPadOS versions prior to 17 Apple watchOS versions prior to 10 Apple macOS versions prior to Sonoma 14 Description: The issue was addressed with improved handling of caches...

Apple macOS Security Breach

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma version 14, which stems from a shortcut that may export sensitive user data without consent...

Apple iOS and iPadOS Security Vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS 17 and iPadOS 17, which arises from an application that may be able to access...

PT-2023-28132 · Poll Maker Team · Poll Maker Plugin

Name of the Vulnerable Software and Affected Versions: Poll Maker Team Poll Maker plugin versions = 4.7.0 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to...

PT-2023-5659 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.6 macOS versions prior to 12.7 macOS versions prior to 14 tvOS versions prior to 17 iOS versions prior to 16.7 iOS versions prior to 17 iPadOS versions prior to 16.7 iPadOS versions prior to 17 watchOS versions prio...

‘ThemeBleed’ flaw in Windows 11 Enables Code Execution

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary The CVE-2023-38146 vulnerability in Windows 11 allows remote attackers to execute arbitrary code, potentially compromising the affected systems security and integrity, and posing a significant...

CVE-2023-4972

Incorrect Use of Privileged APIs vulnerability in Yepas Digital Yepas allows Collect Data as Provided by Users.This issue affects Digital Yepas: before 1.0.1...

PT-2023-31310

Name of the Vulnerable Software and Affected Versions Digital Yepas version 1.0.0 Description The issue is related to an Improper Privilege Management vulnerability, allowing the collection of data as provided by users. This can be exploited due to the incorrect use of privileged APIs...

Yepas Digital Yepas Security Breach

Yepas Digital Yepas is an online trading portal from Yepas Digital. A security vulnerability exists in Yepas Digital Yepas that stems from a mismanagement of privileges that allows an attacker to collect user-supplied data...

Microsoft Exchange Project Deserialization of Untrusted Data Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The specific flaw exists within the lack of protection against deserialization of the Project class. The issue...

Sensitive Data Exposure

nilsteampassnet/teampass is vulnerable to Sensitive Data Exposure. The vulnerability is due to not restricting/limiting directory listing for various end points. The leads to disclosing application-specific user data and files...

CVE-2023-32432

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An app may be able to access user-sensitive data...

Apple macOS Ventura Security Vulnerability

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13.4, which stems from an application that may be able to access sensitive user data...