octobre 2014

Archives du Mois

1	Windows 9 ? non Windows 10 ! 2014-10-01 17:20:47 TNT Sécurité
2	Comment nettoyer vos ordinateurs. 2014-10-02 19:21:01 TNT Sécurité
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

CVE-2023-23330 28 mars 2023

amano Xparc parking solutions 7.1.3879 was discovered to be vulnerable to local file inclusion.

CVE-2023-25262 28 mars 2023

Stimulsoft GmbH Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Server Side Request Forgery (SSRF). TThe Reporting Designer (Web) offers the possibility to embed sources from external locations. If the user chooses an external location, the request to that resource is performed by the server rather than the client. Therefore, the server causes outbound traffic and […]

CVE-2023-27700 28 mars 2023

MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /accessory/picdel.html.

CVE-2023-28430 27 mars 2023

OneSignal is an email, sms, push notification, and in-app message service for mobile apps.The Zapier.yml workflow is triggered on issues (types: [closed]) (i.e., when an Issue is closed). The workflow starts with full write-permissions GitHub repository token since the default workflow permissions on Organization/Repository level are set to read-write. This workflow runs the following step […]

CVE-2023-28102 27 mars 2023

discordrb is an implementation of the Discord API using Ruby. In discordrb before commit `91e13043ffa` the `encoder.rb` file unsafely constructs a shell string using the file parameter, which can potentially leave clients of discordrb vulnerable to command injection. The library is not directly exploitable: the exploit requires that some client of the library calls the […]

APPLE-SA-2023-03-27-7 watchOS 9.4 28 mars 2023

Posted by Apple Product Security via Fulldisclosure on Mar 27APPLE-SA-2023-03-27-7 watchOS 9.4 watchOS 9.4 addresses the following issues. Information about the security content is also available at https://support.apple.com/HT213678. AppleMobileFileIntegrity Available for: Apple Watch Series 4 and later Impact: A user may gain access to protected parts of the file system Description: The issue was addressed […]

APPLE-SA-2023-03-27-9 Studio Display Firmware Update 16.4 28 mars 2023

Posted by Apple Product Security via Fulldisclosure on Mar 27APPLE-SA-2023-03-27-9 Studio Display Firmware Update 16.4 Studio Display Firmware Update 16.4 addresses the following issues. Information about the security content is also available at https://support.apple.com/HT213672. Display Available for: macOS Ventura 13.3 and later Impact: An app may be able to execute arbitrary code with kernel privileges […]

APPLE-SA-2023-03-27-8 Safari 16.4 28 mars 2023

Posted by Apple Product Security via Fulldisclosure on Mar 27APPLE-SA-2023-03-27-8 Safari 16.4 Safari 16.4 addresses the following issues. Information about the security content is also available at https://support.apple.com/HT213671. WebKit Available for: macOS Big Sur and macOS Monterey Impact: Processing maliciously crafted web content may bypass Same Origin Policy Description: This issue was addressed with improved […]

APPLE-SA-2023-03-27-6 tvOS 16.4 28 mars 2023

Posted by Apple Product Security via Fulldisclosure on Mar 27APPLE-SA-2023-03-27-6 tvOS 16.4 tvOS 16.4 addresses the following issues. Information about the security content is also available at https://support.apple.com/HT213674. AppleMobileFileIntegrity Available for: Apple TV 4K (all models) and Apple TV HD Impact: A user may gain access to protected parts of the file system Description: The […]

APPLE-SA-2023-03-27-5 macOS Big Sur 11.7.5 28 mars 2023

Posted by Apple Product Security via Fulldisclosure on Mar 27APPLE-SA-2023-03-27-5 macOS Big Sur 11.7.5 macOS Big Sur 11.7.5 addresses the following issues. Information about the security content is also available at https://support.apple.com/HT213675. Apple Neural Engine Available for: macOS Big Sur Impact: An app may be able to execute arbitrary code with kernel privileges Description: The […]