Apple IO Model Buffer Error Vulnerability

Apple IO Model is a module for handling IO operations from Apple USA. Apple IO Model suffers from a buffer error vulnerability that stems from a boundary error when handling untrusted input in the Model I / O component in macOS. An attacker could use a specially crafted USD file to crash the syst...

Apple WebKit Security Vulnerability

WebKit is an open source web browser engine developed by KDE, Apple and Google. A security vulnerability exists in Apple WebKit, which stems from an application that does not properly implement the force-boxing policy in WebKit. A remote attacker could create a specially crafted web page that wou...

Apple macOS 安全漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. A security vulnerability exists in Apple macOS Big Sur 11.0.1, which can be exploited by attackers to elevate privileges...

CVE-2020-27896

A path handling issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.0.1. A remote attacker may be able to modify the file system...

CVE-2020-27900

An issue existed in the handling of snapshots. The issue was resolved with improved permissions logic. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to preview files it does not have access to...

CVE-2020-9974

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A malicious application may be able to determine kernel memory layout...

CVE-2020-4129

HCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the LDAP service. Fixes are available in HCL Domino versions 9.0.1 FP10 IF6, 10.0.1 FP6 and 11.0.1 FP1 and later...

CVE-2020-4126

HCL iNotes is susceptible to a sensitive cookie exposure vulnerability. This can allow an unauthenticated remote attacker to capture the cookie by intercepting its transmission within an http session. Fixes are available in HCL Domino and iNotes versions 10.0.1 FP6 and 11.0.1 FP2 and later...

CVE-2020-4129

HCL Domino is susceptible to a lockout policy bypass vulnerability in the LDAP service. An unauthenticated attacker could use this vulnerability to mount a brute force attack against the LDAP service. Fixes are available in HCL Domino versions 9.0.1 FP10 IF6, 10.0.1 FP6 and 11.0.1 FP1 and later...

PT-2020-11847 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.0.1 iOS versions prior to 14.2 iPadOS versions prior to 14.2 tvOS versions prior to 14.2 watchOS versions prior to 7.1 Description: An issue existed within the path validation logic for symlinks, which was addressed...

PT-2020-17668 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.0.1 Description: An out-of-bounds read issue was addressed with improved bounds checking. Processing a maliciously crafted font may lead to arbitrary code execution. Recommendations: For versions prior to 11.0.1,...

Security Bulletin: A vulnerability in IBM Java Runtime affects IBM Watson Explorer Advanced Edition (CVE-2016-3426)

Summary There are vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 8, which is used by IBM Watson Explorer. Vulnerability Details CVEID: CVE-2016-3426 DESCRIPTION: An unspecified vulnerability related to the Java Cryptography Extension JCE component could allow a remo...

CVE-2017-13789

An issue was discovered in certain Apple products. Safari before 11.0.1 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar via a crafted web site...

macOS : Apple Safari < 11.0.1 Multiple Vulnerabilities

The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 11.0.1. It is, therefore, affected by multiple vulnerabilities as described in the HT208223 security advisory. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid104355;...