CVE-2019-8693

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.6. An application may be able to read restricted memory...

CVE-2019-8691

CVE-2019-8691 affects macOS Mojave 10.14.x in the Graphics Drivers component. The issue is described as a validation/input sanitization failure that could allow an application to read restricted memory. Apple notes the fix is included in macOS Mojave 10.14.6 (Security Update 2019-004 High Sierra/...

CVE-2019-8692

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.6. An application may be able to read restricted memory...

CVE-2019-8692

CVE-2019-8692 describes a validation issue in macOS Mojave that could allow an application to read restricted memory due to improved input sanitization. The vulnerability affects macOS Mojave peers and is fixed in macOS Mojave 10.14.6 (Security Update 2019-004 High Sierra/Sierra packaging include...

CVE-2019-8691

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.6. An application may be able to read restricted memory...

CVE-2019-8568

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A local user may be able to modify protected parts of the file system...

CVE-2019-8568

CVE-2019-8568 affects Apple's platforms (iOS, macOS, tvOS, watchOS). Description shows a validation issue in the handling of symlinks, enabling a local user to modify protected parts of the file system. Affected products include iOS/iPhone, macOS Mojave, tvOS, and watchOS, with the fix implemente...

CVE-2019-8606

CVE-2019-8606 is an IOKit-related vulnerability in macOS Mojave prior to 10.14.5, where a validation issue in handling symlinks could allow a local user to load unsigned kernel extensions. Apple’s security content notes this was addressed with improved symlink validation, with the fix present in ...

CVE-2019-8606

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Mojave 10.14.5. A local user may be able to load unsigned kernel extensions...

CVE-2019-8603

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Mojave 10.14.5. An application may be able to read restricted memory...

CVE-2019-8603

CVE-2019-8603 describes a validation issue in Apple macOS Mojave’s Accessibility Framework that could allow reading restricted memory due to improved input sanitization not being applied in certain paths. Affected: macOS Mojave 10.14.x prior to 10.14.5. Root cause: input validation/sanitization g...

CVE-2019-8516

A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. Processing a maliciously crafted string may lead to a denial of service...

CVE-2019-7292

CVE-2019-7292 involves a validation issue that could lead to disclosure of process memory when processing malicious web content. Public references in the provided documents indicate fixes in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, and iCloud for Windows 7.11. The...

CVE-2019-7292

A validation issue was addressed with improved logic. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may result in the disclosure of process memory...

Puppet Agent Trust Management Issue Vulnerability

Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs in the U.S. It can be used to manage configuration files, users, cron tasks, packages, system services, etc. Puppet Agent is a Puppet agent end program. A security vulnerability exists in...

Google TensorFlow Buffer Overflow Vulnerability

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. A buffer overflow vulnerability exists in Google TensorFlow. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundarie...

Git for Visual Studio Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts wit...

CVE-2019-19647

radare2 through 4.0.0 lacks validation of the content variable in the function rasmpseudoincbin at libr/asm/asm.c, ultimately leading to an arbitrary write. This allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via crafted input...

CVE-2019-5227

P30, P30 Pro, Mate 20 smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193C00E190R2P1, versions earlier than VOGUE-AL00A 9.1.0.193C00E190R2P1, versions earlier than Hima-AL00B 9.1.0.135C00E133R2P1 and HiSuite with versions earlier than HiSuite 9.1.0.305 have a version downgrade...

evolution security and bug fix update

evolution 3.28.5-9 - Add patch for RH bug 1724984 ECompEditor Ensure attendee changes stored before save 3.28.5-8 - Add patch for RH bug 1724659 Make sure intltool-merge cache is created only once 3.28.5-7 - Add patch for RH bug 1724232 Help Contents F1 has a bad link to GNOME site...