Skip to content
OpenAdvisories

Archive

28 October 2024

Vulnerabilities first published on this day (UTC), newest first.

193 results · Feed

  • Medium 4.3

    A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 18.1, iOS 18.1 an…

  • Medium 5.5

    The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ven…

  • Medium 5.3

    An information leakage was addressed with additional validation. This issue is fixed in Safari 18.1, iOS 18.1 and iPadO…

  • High 7.5

    This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma …

  • Medium 5.5

    This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Seq…

  • High 7.5

    The issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sequoia 15.1, m…

  • Medium 4.6

    The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.1, macOS Ventu…

  • High 7.5

    This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15. An app may be able…

  • High 7.5

    This issue was addressed with improved permissions checking. This issue is fixed in Xcode 16. An app may be able to inh…

  • High 7.1

    A path deletion vulnerability was addressed by preventing vulnerable code from running with privileges. This issue is f…

  • Medium 5.5

    A logic issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPa…

  • Medium 5.5

    The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ven…

  • High 7.1
    CVE-2024-44258 Public exploit

    This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 1…

  • Low 3.3

    A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoi…

  • High 7.8

    The issue was addressed with improved checks. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, ma…

  • Medium 4.6

    The issue was addressed with improved checks. This issue is fixed in iOS 18.1 and iPadOS 18.1. An attacker may be able …

  • Medium 5.5

    This issue was addressed with improved redaction of sensitive information. This issue is fixed in visionOS 2.1. A user …

  • Medium 4.6

    The issue was addressed with improved authentication. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and…

  • Medium 5.5

    This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 1…

  • Medium 5.5

    A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be …

  • Medium 5.5

    This issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS…

  • Medium 5.5

    An information disclosure issue was addressed with improved private data redaction for log entries. This issue is fixed…

  • Medium 5.5

    An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.1, macOS So…

  • Medium 5.5

    An information disclosure issue was addressed with improved private data redaction for log entries. This issue is fixed…

  • Medium 6.5

    The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and …

  • Medium 5.4

    The issue was addressed with improved checks. This issue is fixed in Safari 18.1, iOS 17.7.1 and iPadOS 17.7.1, iOS 18.…

  • Medium 6.5

    An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.1, macOS So…

  • High 7.7

    A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This iss…

  • Low 2.4

    This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.1 and iPadOS …

  • High 8.4

    A path handling issue was addressed with improved logic. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia…

  • Low 3.3

    This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sequoia 15.1, m…

  • Medium 4.0

    A logic issue was addressed with improved state management. This issue is fixed in iOS 18.1 and iPadOS 18.1. An app may…

  • Low 3.3

    The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ven…

  • High 7.8

    This issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS…

  • High 8.8

    A custom URL scheme handling issue was addressed with improved input validation. This issue is fixed in iOS 18.1 and iP…

  • High 8.8

    This issue was addressed through improved state management. This issue is fixed in Safari 18.1, iOS 17.7.1 and iPadOS 1…

  • Critical 10.0

    WordPress Plugin Propagator plugin <= 0.1 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in nunomorgadinho Plugin Propagator wp-propagator allows Upload a Web Shell to a Web Server.This issue affects Plugin Propagator: from n/a through <= 0.1.

  • Critical 10.0

    WordPress AR For WordPress plugin <= 6.6 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in webandprint AR For WordPress ar-for-wordpress allows Upload a Web Shell to a Web Server.This issue affects AR For WordPress: from n/a through <= 6.6.

  • High 7.5

    WordPress NewsCard theme <= 1.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themehorse NewsCard newscard.This issue affects NewsCard: from n/a through <= 1.3.

  • High 7.5

    WordPress Meta News theme <= 1.1.7 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themehorse Meta News meta-news.This issue affects Meta News: from n/a through <= 1.1.7.