Archive
25 October 2023
Vulnerabilities first published on this day (UTC), newest first.
213 results · Feed
-
Unscored —
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma…
-
Medium 4.4
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma…
-
Unscored —
The issue was addressed with improved handling of caches. This issue is fixed in macOS Sonoma 14.1, iOS 16.7.2 and iPad…
-
Medium 5.5
An app may be able to access protected user data. This issue is fixed in macOS Sonoma 14, macOS Ventura 13.6.1. The iss…
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1,…
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, i…
-
Unscored —
This issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1, w…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17…
-
Unscored —
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma…
-
Unscored —
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.1. An attacker with …
-
Unscored —
The issue was addressed with improved permissions logic. This issue is fixed in macOS Sonoma 14.1. An app may be able t…
-
Unscored —
This issue was addressed by removing the vulnerable code. This issue is fixed in watchOS 10.1, iOS 16.7.2 and iPadOS 16…
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey …
-
Unscored —
This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.2 and iPadOS…
-
Unscored —
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14.1, macOS Montere…
-
Unscored —
The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.6.1. An attacker ma…
-
Unscored —
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. A…
-
Critical 10.0
org.xwiki.platform:xwiki-platform-office-importer vulnerable to arbitrary server side file writing from account through office converter
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 3.5-milestone-1 and prior to versions 14.10.8 and 15.3-rc-1, triggering the office converter with a specially crafted file name allows…
-
Critical 10.0
XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro
XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax. Prior to version 14.10.6 of `org.xwiki.platform:xwiki-core-rendering-macro-footnotes` and `org.xwiki.platform:xwiki-rendering-macro-footnotes` and…
-
Medium 6.5
org.xwiki.platform:xwiki-platform-oldcore may leak data through deleted and re-created documents
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 9.4-rc-1 and prior to versions 14.10.8 and 15.3-rc-1, when a document has been deleted and re-created, it is possible for users with v…
-
High 8.1
org.xwiki.platform:xwiki-platform-attachment-api vulnerable to Missing Authorization on Attachment Move
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting with the introduction of attachment move support in version 14.0-rc-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, an attacker with edit…
-
Unscored —
HP Print and Scan Doctor for Windows may potentially be vulnerable to escalation of privilege. HP is releasing software…
-
Critical 10.0
Privilege escalation (PR)/remote code execution from account through Menu.UIExtensionSheet
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 5.1-rc-1 and prior to versions 14.10.8 and 15.3-rc-1, any user who can edit their own user profile can execute arbitrary script macros…
-
Critical 9.1CVE-2023-37908 Public exploit
org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability
XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax. The cleaning of attributes during XHTML rendering, introduced in version 14.6-rc-1, allowed the injection of arbitrary HTML code and thus cross-si…
-
High 8.8
Use after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to potentially exploit he…
-
High 8.8
iTop XSS vulnerability on pages/UI.php
iTop is an open source, web-based IT service management platform. Prior to versions 3.0.4 and 3.1.0, on `pages/UI.php`, cross site scripting is possible. This issue is fixed in versions 3.0.4 and 3.1.0.
-
High 8.8
iTop XSS vulnerability on pages/preferences.php
iTop is an open source, web-based IT service management platform. Prior to versions 3.0.4 and 3.1.0, when displaying `pages/preferences.php`, cross site scripting is possible. This issue is fixed in versions 3.0.4 and 3.1.0.
-
High 7.5
EisBaer Scada - CWE-749: Exposed Dangerous Method or Function
EisBaer Scada - CWE-749: Exposed Dangerous Method or Function
-
High 7.1
EisBaer Scada - CWE-256: Plaintext Storage of a Password
EisBaer Scada - CWE-256: Plaintext Storage of a Password
-
High 7.1
EisBaer Scada - CWE-321: Use of Hard-coded Cryptographic Key
EisBaer Scada - CWE-321: Use of Hard-coded Cryptographic Key
-
High 7.5
EisBaer Scada - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
EisBaer Scada - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
-
High 7.5
EisBaer Scada - CWE-732: Incorrect Permission Assignment for Critical Resource
EisBaer Scada - CWE-732: Incorrect Permission Assignment for Critical Resource
-
High 7.2
A remote code execution issue exists in HPE OneView.
-
High 7.5
EisBaer Scada - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
EisBaer Scada - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
-
High 8.8
EisBaer Scada - CWE-285: Improper Authorization
EisBaer Scada - CWE-285: Improper Authorization
-
High 8.8
The Android Client application, when enrolled to the AppHub server, connects to an MQTT broker to exchange messages and…
-
High 8.8
The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any ser…
-
High 8.3
The Android Client application, when enrolled with the define method 1 (the user manually inserts the server ip address…
-
High 8.8
The Android Client application, when enrolled with the define method 1(the user manually inserts the server ip address)…