Archive
16 September 2024
Vulnerabilities first published on this day (UTC), newest first.
42 results · Clear filters · Feed
-
High 7.5
A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15, mac…
-
High 7.5
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be …
-
High 7.5
A logic issue was addressed with improved checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18…
-
High 8.4
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15. An app may be abl…
-
High 7.5
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18 and iPadOS 18…
-
High 8.1
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPad…
-
High 7.5
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoi…
-
High 7.1
This issue was addressed with improved checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, macOS Sequoia 15, macOS…
-
High 7.5
A privacy issue was addressed by removing sensitive data. This issue is fixed in Xcode 16. An attacker may be able to d…
-
High 7.8
This issue was addressed by enabling hardened runtime. This issue is fixed in Xcode 16. A malicious application may gai…
-
High 8.1CVE-2024-27876 Public exploit
A race condition was addressed with improved locking. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadO…
-
High 7.5
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A non-privileg…
-
High 7.5
An integrity issue was addressed with Beacon Protection. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15,…
-
High 7.5
The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS…
-
High 7.5
This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. A remote attac…
-
High 7.8
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15, macOS Son…
-
High 7.8
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. An app may be able to gain root …
-
High 7.8
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15, macO…
-
High 8.1
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15…
-
High 7.5
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A camera exten…
-
High 7.5
The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may…
-
High 7.7
This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. An app may gai…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. Proc…
-
High 7.5
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. A logic issue existed where a pr…
-
High 7.3
Javascript Injection in Vending Info/Buyers Info Module in FluxCP
FluxCP is a web-based Control Panel for rAthena servers written in PHP. A javascript injection is possible via venders/buyers list pages and shop names, that are currently not sanitized. This allows executing arbitrary javascript code on the user's browser ju…
-
High 7.3
Tampering by prototype polution in DOMPurify
DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It has been discovered that malicious HTML using special nesting techniques can bypass the depth checking added to DOMPurify in recent releases. It was also possible to…
-
High 7.5
A race condition in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escala…
-
High 7.2
Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to enable informati…
-
High 7.5
Improper input validation in UEFI firmware error handler for some Intel(R) Processors may allow a privileged user to po…
-
High 8.2
Untrusted pointer dereference in UEFI firmware for some Intel(R) reference processors may allow a privileged user to po…
-
High 7.5
Improper access control in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable…
-
High 7.5
Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enab…
-
High 7.9
Race condition in Seamless Firmware Updates for some Intel(R) reference platforms may allow a privileged user to potent…
-
High 8.8
D-Link WiFi router - Hidden Functionality
Certain models of D-Link wireless routers contain hidden functionality. By sending specific packets to the web service, the attacker can forcibly enable the telnet service and log in using hard-coded credentials. The telnet service enabled through this method…
-
High 8.8
The SYSCOM Group OMFLOW - Broken Access Control
OMFLOW from The SYSCOM Group does not properly restrict access to the system settings modification functionality, allowing remote attackers with regular privileges to update system settings or create accounts with administrator privileges, thereby gaining con…
-
High 7.5
The SYSCOM Group OMFLOW - Information Leakage
OMFLOW from The SYSCOM Group has an information leakage vulnerability, allowing unauthorized remote attackers to read arbitrary system configurations. If LDAP authentication is enabled, attackers can obtain plaintext credentials.
-
High 7.5
A Business Logic vulnerability in Shopkit 1.0 allows an attacker to add products with negative quantities to the shoppi…
-
High 7.5
TOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the UploadCustomModule function, which…
-
High 8.1
The HTTPD binary in multiple ZTE routers has a local file inclusion vulnerability in session_init function. The session…
-
High 8.1
The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in rsa_decrypt function. This …