8 March 2024

56 results · Clear filters · Feed

• Medium 4.6
  CVE-2024-23293

  This issue was addressed through improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sono…

  Apple macOS iOS and iPadOS watchOS macOS iOS
  Mar 8, 2024
• Medium 4.0
  CVE-2024-23220

  The issue was addressed with improved handling of caches. This issue is fixed in iOS 17.4 and iPadOS 17.4, visionOS 1.1…

  Apple iOS and iPadOS visionOS iOS
  Mar 8, 2024
• Medium 5.5
  CVE-2023-28826

  This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.7.6 and iPadOS…

  Apple macOS iOS and iPadOS macOS iOS
  Mar 8, 2024
• Medium 5.9
  CVE-2024-23277

  The issue was addressed with improved checks. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4. An at…

  Apple macOS iOS and iPadOS macOS iOS
  Mar 8, 2024
• Medium 6.5
  CVE-2024-23241

  This issue was addressed through improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sono…

  Apple macOS iOS and iPadOS tvOS macOS iOS
  Mar 8, 2024
• Medium 6.7
  CVE-2024-23216

  A path handling issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.7.4, macOS Sonom…

  Apple macOS macOS
  Mar 8, 2024
• Medium 6.2
  CVE-2024-23201

  A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS …

  Apple macOS iOS and iPadOS watchOS macOS iOS
  Mar 8, 2024
• Medium 6.2
  CVE-2024-23283

  A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.6 a…

  Apple macOS iOS and iPadOS macOS iOS
  Mar 8, 2024
• Medium 6.2
  CVE-2024-23295

  A permissions issue was addressed to help ensure Personas are always protected. This issue is fixed in visionOS 1.1. An…

  Apple visionOS
  Mar 8, 2024
• Medium 5.5
  CVE-2024-23260

  This issue was addressed by removing additional entitlements. This issue is fixed in macOS Sonoma 14.4. An app may be a…

  Apple macOS macOS
  Mar 8, 2024
• Medium 6.3
  CVE-2024-2281

  boyiddha Automated-Mess-Management-System Setting index.php access control

  A vulnerability was found in boyiddha Automated-Mess-Management-System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/index.php of the component Setting Handler. The manipulation leads to improper access cont…

  boyiddha Automated-Mess-Management-System
  Mar 8, 2024
• Medium 4.3
  CVE-2024-2277

  Bdtask G-Prescription Gynaecology & OBS Consultation Software Password Reset change_password_save cross-site request forgery

  A vulnerability was found in Bdtask G-Prescription Gynaecology & OBS Consultation Software 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /Setting/change_password_save of the component Password Reset Handle…

  Bdtask G-Prescription Gynaecology & OBS Consultation Software
  Mar 8, 2024
• Medium 6.5
  CVE-2024-28753

  RaspAP (aka raspap-webgui) through 3.0.9 allows remote attackers to read the /etc/passwd file via a crafted request.

  Mar 8, 2024
• Medium 6.2
  CVE-2024-27612 Public exploit EPSS 11%

  Numbas editor before 7.3 mishandles editing of themes and extensions.

  Mar 8, 2024
• Medium 5.9
  CVE-2024-25848

  In the module "Ever Ultimate SEO" (everpsseo) <= 8.1.2 from Team Ever for PrestaShop, a guest can perform SQL injection…

  Mar 8, 2024
• Medium 5.3
  CVE-2024-26309

  Archer Platform 6.x before 6.14 P2 HF2 (6.14.0.2.2) contains a sensitive information disclosure vulnerability. An unaut…

  Mar 8, 2024