Archive
27 October 2020
Vulnerabilities first published on this day (UTC), newest first.
173 results · Feed
-
Unscored —
The search functionality of the Greenmart theme 2.4.2 for WordPress is vulnerable to XSS.
-
Unscored —
A logic issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.1, Security Update 20…
-
Unscored —
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, watchOS 5.2.1.…
-
Unscored —
A validation issue existed in Trust Anchor Management. This issue was addressed with improved validation. This issue is…
-
Unscored —
This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Apple Music 3.4.0…
-
Unscored —
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.7, Secur…
-
Unscored —
This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.7, Security Update 2020-005 …
-
Unscored —
A memory corruption issue was addressed with improved validation. This issue is fixed in Safari 13.0.1, iOS 13.1 and iP…
-
Unscored —
A trust issue was addressed by removing a legacy API. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0. An at…
-
Unscored —
An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed i…
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 6.1.2, iOS 13.3.1 an…
-
Unscored —
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in …
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.7, Secu…
-
Unscored —
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.3, S…
-
Unscored —
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.6, Security …
-
Unscored —
A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in Safari 13.0.5. …
-
Unscored —
This issue was addressed with improved checks This issue is fixed in macOS Catalina 10.15.4, Security Update 2020-002 M…
-
High —
xml-crypto's HMAC-SHA1 signatures can bypass validation via key confusion
### Impact An attacker can inject an HMAC-SHA1 signature that is valid using only knowledge of the RSA public key. This allows bypassing signature validation. ### Patches Version 2.0.0 has the fix. ### Workarounds The recommendation is to upgrade. In case tha…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Catalina 10.15.4, Se…
-
Unscored —
The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a Z…
-
Unscored —
The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a Z…
-
Unscored —
The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a Z…
-
Unscored —
An access issue was addressed with improved access restrictions. This issue is fixed in macOS Catalina 10.15.3, Securit…
-
Unscored —
An issue existed with Siri Suggestions access to encrypted data. The issue was fixed by limiting access to encrypted da…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.1, Security Upd…
-
Unscored —
A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 fo…
-
Unscored —
An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Catalina 10.15. A mali…
-
Unscored —
A user privacy issue was addressed by removing the broadcast MAC address. This issue is fixed in macOS Catalina 10.15, …
-
Unscored —
A logic issue was addressed with improved validation. This issue is fixed in Safari 13.0.5. A URL scheme may be incorre…
-
Unscored —
An information disclosure issue existed in the handling of the Storage Access API. This issue was addressed with improv…
-
Unscored —
This issue was addressed by verifying host keys when connecting to a previously-known SSH server. This issue is fixed i…
-
Unscored —
A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Catalina 10.15.4, Secur…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 13.3, iCloud for Wind…
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13…
-
Unscored —
The issue was addressed with improved validation when an iCloud Link is created. This issue is fixed in iOS 13.3 and iP…
-
Unscored —
An API issue existed in the handling of outgoing phone calls initiated with Siri. This issue was addressed with improve…
-
Unscored —
This issue was addressed with improved checks. This issue is fixed in tvOS 13.3, watchOS 6.1.1, iCloud for Windows 10.9…
-
Unscored —CVE-2019-8852 Public exploit
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.2, S…
-
Unscored —
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.2, S…
-
Unscored —
Addressed remote code execution vulnerability in reg_device.php due to insufficient validation of user input.in Western…