Skip to content
OpenAdvisories

Archive

29 July 2024

Vulnerabilities first published on this day (UTC), newest first.

121 results · Clear filters · Feed

  • High 7.1

    A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macO…

  • High 7.8

    A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPa…

  • High 7.8

    The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Monterey …

  • High 7.7

    A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS …

  • High 7.5

    The issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS …

  • High 8.4

    The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ve…

  • High 7.1

    The issue was addressed with improved restriction of data container access. This issue is fixed in macOS Monterey 12.7.…

  • High 7.8

    A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPa…

  • High 7.7

    This issue was addressed through improved state management. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sono…

  • High 7.5
    CVE-2024-40815 Public exploit

    A race condition was addressed with additional validation. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonom…

  • High 7.1

    An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS …

  • High 7.5

    A type confusion issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 1…

  • High 7.8

    An integer overflow was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, …

  • High 7.8

    The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ve…

  • High 7.1

    A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sonoma 14.6, ma…

  • High 7.5

    This issue was addressed through improved state management. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17…

  • High 8.4

    An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Monterey 12.7.6, macOS…

  • High 7.5

    A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPa…

  • High 8.4

    An input validation issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.7.6, m…

  • High 7.1

    This issue was addressed by adding an additional prompt for user consent. This issue is fixed in iOS 17.6 and iPadOS 17…

  • High 7.5

    A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma …

  • High 8.4

    The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. An app may be able to modify pr…

  • High 7.5

    A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sonoma 14.4, macOS Ventura 13.7. A…

  • High 8.4

    The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ve…

  • High 7.8

    Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability

    Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Comodo Internet Security Pro. An attacker must first obtain the abilit…

  • High 7.8

    Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability

    Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Comodo Internet Security Pro. An attacker must first obtain the abilit…

  • High 7.8

    Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability

    Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Comodo Internet Security Pro. An attacker must first obtain the abilit…

  • High 7.8

    Comodo Firewall Link Following Local Privilege Escalation Vulnerability

    Comodo Firewall Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Comodo Firewall. An attacker must first obtain the ability to execute low-privileged code on…

  • High 7.8

    Comodo Internet Security Pro Directory Traversal Local Privilege Escalation Vulnerability

    Comodo Internet Security Pro Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Comodo Internet Security Pro. An attacker must first obtain the ability to…

  • High 8.8

    This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.4, macOS Big Sur 11.7.5, macO…

  • High 7.8

    The issue was addressed with improved memory handling. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, wa…

  • High 7.8

    A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.4. An app may b…

  • High 7.0

    A race condition was addressed with improved state handling. This issue is fixed in macOS Sonoma 14. An app may be able…

  • High 8.6

    A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14. A sandboxed pro…

  • High 7.2

    Stored XSS in aimhubio/aim

    A stored cross-site scripting (XSS) vulnerability exists in aimhubio/aim version 3.19.3. The vulnerability arises from the improper neutralization of input during web page generation, specifically in the logs-tab for runs. The terminal output logs are display…

  • High 7.8

    ALSA: emux: improve patch ioctl data validation

    In the Linux kernel, the following vulnerability has been resolved: ALSA: emux: improve patch ioctl data validation In load_data(), make the validation of and skipping over the main info block match that in load_guspatch(). In load_guspatch(), add checking th…

  • High 8.8

    Remote Code Execution (RCE) in Delphix

    Versions of Delphix Engine prior to Release 25.0.0.0 contain a flaw which results in Remote Code Execution (RCE).

  • High 7.3

    ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link

    In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link Commit e70b8dd26711 ("ASoC: mediatek: mt8195: Remove afe-dai component and rework codec link") removed the codec entry for…

  • High 8.3
    CVE-2024-6748 EPSS 24%

    SQL Injection

    Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and RMM versions 128317 and below are vulnerable to authenticated SQL injection in the URL monitoring.

  • High 8.7

    Note Mark has a stored XSS in the note link href attribute

    Note Mark is a web-based Markdown notes app. A stored cross-site scripting (XSS) vulnerability in Note Mark allows attackers to execute arbitrary web scripts via a crafted payload injected into the URL value of a link in the markdown content. This vulnerabili…