[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities
📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 424899
> CVE-2024-27871 [MEDIUM 5.5]
[PUBLISHED: 2024-07-29] [EPSS 0.26%]
A path handling issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.6, iOS 17.6 and iPadOS 17.6. An app may be able to access protected user data.
AFFECTED_PRODUCTS: Apple macOS, Apple Iphone Os, Apple Ipados
> CVE-2024-27863 [MEDIUM 5.5]
[PUBLISHED: 2024-07-29] [EPSS 0.30%]
An information disclosure issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. A local attacker may be able to determine kernel memory layout.
AFFECTED_PRODUCTS: Apple macOS, Apple Iphone Os, Apple Tvos ... (+3)
> CVE-2024-27862 [LOW 2.4]
[PUBLISHED: 2024-07-29] [EPSS 0.55%]
A logic issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.6. Enabling Lockdown Mode while setting up a Mac may cause FileVault to become unexpectedly disabled.
AFFECTED_PRODUCTS: Apple macOS
> CVE-2024-27853 [MEDIUM 4.4]
[PUBLISHED: 2024-07-29] [EPSS 0.19%]
This issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4. A maliciously crafted ZIP archive may bypass Gatekeeper checks.
AFFECTED_PRODUCTS: Apple macOS
> CVE-2024-27826 [HIGH 7.8]
[PUBLISHED: 2024-07-29] [EPSS 0.26%]
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6.8, macOS Sonoma 14.5, macOS Monterey 12.7.6, watchOS 10.5, visionOS 1.3, tvOS 17.5, iOS 17.5 and iPadOS 17.5. An app may be able to execute arbitrary code with kernel privileges.
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple macOS ... (+5)
> CVE-2024-27823 [MEDIUM 5.9]
[PUBLISHED: 2024-07-29] [EPSS 0.68%]
A race condition was addressed with improved locking. This issue is fixed in macOS Sonoma 14.5, iOS 16.7.8 and iPadOS 16.7.8, macOS Ventura 13.6.7, watchOS 10.5, visionOS 1.3, tvOS 17.5, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5. An attacker in a privileged network position may be able to spoo...
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple macOS ... (+7)
> CVE-2024-27809 [MEDIUM 5.5]
[PUBLISHED: 2024-07-29] [EPSS 0.20%]
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive data.
AFFECTED_PRODUCTS: Apple macOS
> CVE-2024-23261 [HIGH 7.5]
[PUBLISHED: 2024-07-29] [EPSS 0.91%]
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.8. An attacker may be able to read information belonging to another user.
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple macOS
> CVE-2024-7252 [HIGH 7.8]
[PUBLISHED: 2024-07-29] [EPSS 0.32%]
Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Comodo Internet Security Pro. An attacker must first obtain the ability to execute low-privileged code on the t...
AFFECTED_PRODUCTS: Comodo Internet Security
> CVE-2024-7251 [HIGH 7.8]
[PUBLISHED: 2024-07-29] [EPSS 0.32%]
Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Comodo Internet Security Pro. An attacker must first obtain the ability to execute low-privileged code on the t...
AFFECTED_PRODUCTS: Comodo Internet Security
> CVE-2024-7250 [HIGH 7.8]
[PUBLISHED: 2024-07-29] [EPSS 0.32%]
Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Comodo Internet Security Pro. An attacker must first obtain the ability to execute low-privileged code on the t...
AFFECTED_PRODUCTS: Comodo Internet Security
> CVE-2024-7249 [HIGH 7.8]
[PUBLISHED: 2024-07-29] [EPSS 0.31%]
Comodo Firewall Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Comodo Firewall. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit th...
AFFECTED_PRODUCTS: Comodo Firewall
> CVE-2024-7248 [HIGH 7.8]
[PUBLISHED: 2024-07-29] [EPSS 0.48%]
Comodo Internet Security Pro Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Comodo Internet Security Pro. An attacker must first obtain the ability to execute low-privileged code on the targe...
AFFECTED_PRODUCTS: Comodo Internet Security
> CVE-2024-3219
[PUBLISHED: 2024-07-29] [EPSS 0.25%]
The “socket” module provides a pure-Python fallback to the socket.socketpair() function for platforms that don’t support AF_UNIX, such as Windows. This pure-Python implementation uses AF_INET or AF_INET6 to create a local connected pair of sockets. The connection between the two sockets was not...
> CVE-2023-42959 [HIGH 7.0]
[PUBLISHED: 2024-07-29] [EPSS 0.12%]
A race condition was addressed with improved state handling. This issue is fixed in macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges.
AFFECTED_PRODUCTS: Apple macOS
> CVE-2023-42958 [HIGH 7.8]
[PUBLISHED: 2024-07-29] [EPSS 0.17%]
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.4. An app may be able to gain elevated privileges.
AFFECTED_PRODUCTS: Apple macOS
> CVE-2023-42957 [LOW 3.3]
[PUBLISHED: 2024-07-29] [EPSS 0.16%]
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10. An app may be able to read sensitive location information.
AFFECTED_PRODUCTS: Apple macOS, Apple Iphone Os, Apple Watchos ... (+1)
> CVE-2023-42949 [LOW 3.3]
[PUBLISHED: 2024-07-29] [EPSS 0.18%]
This issue was addressed with improved data protection. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17. An app may be able to access edited photos saved to a temporary directory.
AFFECTED_PRODUCTS: Apple macOS, Apple Iphone Os, Apple Tvos ... (+2)
> CVE-2023-42948 [LOW 3.3]
[PUBLISHED: 2024-07-29] [EPSS 0.17%]
This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14. A Wi-Fi password may not be deleted when activating a Mac in macOS Recovery.
AFFECTED_PRODUCTS: Apple macOS
> CVE-2023-42943 [MEDIUM 5.5]
[PUBLISHED: 2024-07-29] [EPSS 0.18%]
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14. An app may be able to read sensitive location information.
AFFECTED_PRODUCTS: Apple macOS
> CVE-2023-42925 [LOW 3.3]
[PUBLISHED: 2024-07-29] [EPSS 0.16%]
The issue was addressed with improved restriction of data container access. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access Notes attachments.
AFFECTED_PRODUCTS: Apple macOS, Apple Iphone Os, Apple Ipados
> CVE-2023-42918 [MEDIUM 6.3]
[PUBLISHED: 2024-07-29] [EPSS 0.16%]
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14. A sandboxed process may be able to circumvent sandbox restrictions.
AFFECTED_PRODUCTS: Apple macOS
> CVE-2023-40398 [HIGH 8.8]
[PUBLISHED: 2024-07-29] [EPSS 0.19%]
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.4, macOS Big Sur 11.7.5, macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. A sandboxed process may be able to circumvent sandbox restrictions.
AFFECTED_PRODUCTS: Apple macOS, Apple macOS, Apple macOS ... (+2)
> CVE-2023-40396 [HIGH 7.8]
[PUBLISHED: 2024-07-29] [EPSS 0.22%]
The issue was addressed with improved memory handling. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17. An app may be able to execute arbitrary code with kernel privileges.
AFFECTED_PRODUCTS: Apple macOS, Apple Iphone Os, Apple Tvos ... (+2)
> CVE-2019-6185
[PUBLISHED: 2024-07-29]
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
> CVE-2019-6174
[PUBLISHED: 2024-07-29]
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
> CVE-2019-6164
[PUBLISHED: 2024-07-29]
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
> CVE-2019-6162
[PUBLISHED: 2024-07-29]
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
> CVE-2017-3769
[PUBLISHED: 2024-07-29]
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
> CVE-2017-3766
[PUBLISHED: 2024-07-29]
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
> CVE-2017-3755
[PUBLISHED: 2024-07-29]
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
> CVE-2024-6620 [LOW 3.5]
[PUBLISHED: 2024-07-29] [EPSS 0.28%]
Honeywell PC42t, PC42tp, and PC42d Printers, T10.19.020016 to T10.20.060398, contain a cross-site scripting vulnerability. A(n) attacker could potentially inject malicious code which may lead to information disclosure, session theft, or client-side request forgery. Honeywell recommends updating to t...
> CVE-2022-4038
[PUBLISHED: 2024-07-29]
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
> CVE-2022-48185
[PUBLISHED: 2024-07-29]
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
> CVE-2019-19761
[PUBLISHED: 2024-07-29]
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
> CVE-2019-19760
[PUBLISHED: 2024-07-29]
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
> CVE-2019-19759
[PUBLISHED: 2024-07-29]
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
> CVE-2024-6578 [MEDIUM 5.4]
[PUBLISHED: 2024-07-29] [EPSS 0.29%]
A stored cross-site scripting (XSS) vulnerability exists in aimhubio/aim version 3.19.3. The vulnerability arises from the improper neutralization of input during web page generation, specifically in the logs-tab for runs. The terminal output logs are displayed using the `dangerouslySetInnerHTML` fu...
AFFECTED_PRODUCTS: Aimstack Aim
> CVE-2024-37859 [MEDIUM 6.1]
[PUBLISHED: 2024-07-29] [EPSS 0.40%]
Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the page parameter to php-lfis/admin/index.php.
AFFECTED_PRODUCTS: Oretnom23 Lost And Found Information System
> CVE-2024-37858 [CRITICAL 9.8]
[PUBLISHED: 2024-07-29] [EPSS 0.79%]
SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the id parameter to php-lfis/admin/categories/manage_category.php.
AFFECTED_PRODUCTS: Oretnom23 Lost And Found Information System
> CVE-2024-37857 [HIGH 8.8]
[PUBLISHED: 2024-07-29] [EPSS 0.81%]
SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via id parameter to php-lfis/admin/categories/view_category.php.
AFFECTED_PRODUCTS: Oretnom23 Lost And Found Information System
> CVE-2024-37856 [MEDIUM 5.4]
[PUBLISHED: 2024-07-29] [EPSS 0.30%]
Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the first, last, middle name fields in the User Profile page.
AFFECTED_PRODUCTS: Oretnom23 Lost And Found Information System
> CVE-2024-28806 [HIGH 7.5]
[PUBLISHED: 2024-07-29] [EPSS 0.59%]
An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Remote unauthenticated attackers can upload files at an arbitrary path.
AFFECTED_PRODUCTS: Italtel I Mcs Nfv
> CVE-2024-28805 [CRITICAL 9.1]
[PUBLISHED: 2024-07-29] [EPSS 0.36%]
An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. There is Incorrect Access Control.
AFFECTED_PRODUCTS: Italtel I Mcs Nfv
> CVE-2024-28804 [HIGH 7.1]
[PUBLISHED: 2024-07-29] [EPSS 0.30%]
An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Stored Cross-site scripting (XSS) can occur via POST.
AFFECTED_PRODUCTS: Italtel I Mcs Nfv
> CVE-2024-6727 [MEDIUM 5.4]
[PUBLISHED: 2024-07-29] [EPSS 0.31%]
A flaw in versions of Delphix Data Control Tower (DCT) prior to 19.0.0 results in broken authentication through the enable-scale-testing functionality of the application.
> CVE-2024-6726 [HIGH 8.8]
[PUBLISHED: 2024-07-29] [EPSS 0.74%]
Versions of Delphix Engine prior to Release 25.0.0.0 contain a flaw which results in Remote Code Execution (RCE).
> CVE-2024-42098 [MEDIUM 5.5]
[PUBLISHED: 2024-07-29] [EPSS 0.21%]
In the Linux kernel, the following vulnerability has been resolved: crypto: ecdh - explicitly zeroize private_key private_key is overwritten with the key parameter passed in by the caller (if present), or alternatively a newly generated private key. However, it is possible that the caller provides...
AFFECTED_PRODUCTS: Linux Linux Kernel, Linux Linux Kernel, Linux Linux Kernel ... (+1)
> CVE-2024-42097 [MEDIUM 5.5]
[PUBLISHED: 2024-07-29] [EPSS 0.23%]
In the Linux kernel, the following vulnerability has been resolved: ALSA: emux: improve patch ioctl data validation In load_data(), make the validation of and skipping over the main info block match that in load_guspatch(). In load_guspatch(), add checking that the specified patch length matches...
AFFECTED_PRODUCTS: Linux Linux Kernel, Linux Linux Kernel, Linux Linux Kernel ... (+4)
> CVE-2024-42096 [MEDIUM 5.5]
[PUBLISHED: 2024-07-29] [EPSS 0.24%]
In the Linux kernel, the following vulnerability has been resolved: x86: stop playing stack games in profile_pc() The 'profile_pc()' function is used for timer-based profiling, which isn't really all that relevant any more to begin with, but it also ends up making assumptions based on the stack la...
AFFECTED_PRODUCTS: Linux Linux Kernel, Linux Linux Kernel, Linux Linux Kernel ... (+5)