2021

CVE-2019-8643: Arun Sharma of VMWare This issue is fixed in macOS Mojave 10.14. Description: A logic issue was addressed

A validation issue was addressed with improved logic. This issue is fixed in macOS High Sierra 10.13.5, Security Update

A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13, iClou

A cryptographic weakness existed in the authentication protocol of Remote Desktop. This issue was addressed by implement

An issue existed in preventing the uploading of CallKit call history to iCloud. This issue was addressed through improve

An access issue was addressed with additional sandbox restrictions on applications. This issue is fixed in macOS High Si

An issue existed in the storage of sensitive tokens. This issue was addressed by placing the tokens in Keychain. This is

An issue in handling file permissions was addressed with improved validation. This issue is fixed in macOS High Sierra 1

A state management issue was addressed with improved state validation. This issue is fixed in macOS High Sierra 10.13.1,

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS High Sierra 10.13.1,

A race condition was addressed with additional validation. This issue is fixed in tvOS 11.2, iOS 11.2, macOS High Sierra

An issue existed in the handling of Contact sharing. This issue was addressed with improved handling of user information

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 11.2, watchOS 4.2. An

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS High Sierra 10.13. A

In __f2fs_setxattr in fs/f2fs/xattr.c in the Linux kernel through 5.15.11, there is an out-of-bounds memory access when

A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through PDFTron earli

PDFTron prior to 9.0.7 version may be forced to read beyond allocated boundaries when parsing a maliciously crafted PDF

pytorch-lightning is vulnerable to Deserialization of Untrusted Data

NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research a

cordova-plugin-fingerprint-aio is a plugin provides a single and simple interface for accessing fingerprint APIs on both

NVIDIA GeForce Experience contains a vulnerability in user authorization, where GameStream does not correctly apply indi

Zoho ManageEngine ServiceDesk Plus before 12003 allows authentication bypass in certain admin configurations.

The password parameter on Simple Online Mens Salon Management System (MSMS) 1.0 appears to be vulnerable to SQL injectio

The id parameter from Online Enrollment Management System 1.0 system appears to be vulnerable to SQL injection attacks.

e2guardian v5.4.x <= v5.4.3r is affected by missing SSL certificate validation in the SSL MITM engine. In standalone mod

An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows U

TP-Link wifi router TL-WR802N V4(JP), with firmware version prior to 211202, is vulnerable to OS command injection.

load_cache in GEGL before 0.4.34 allows shell expansion when a pathname in a constructed command line is not escaped or

In Open5GS 2.4.0, a crafted packet from UE can crash SGW-U/UPF.

An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted management APIs being accessi

A vulnerability in SonicWall SMA100 password change API allows a remote unauthenticated attacker to perform SMA100 usern

Out of bounds write in WebRTC in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit he

Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corrup

Insufficient data validation in new tab page in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cr

Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potenti

Integer underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap

Use after free in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap

Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potenti

Use after free in developer tools in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploi

Heap buffer overflow in BFCache in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the

Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corrup

Insufficient data validation in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-or

Heap buffer overflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit he

Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the rend

Type confusion in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap co

Heap buffer overflow in extensions in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to in

Incorrect security UI in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform domain spo

Use after free in UI in Google Chrome on Linux prior to 96.0.4664.93 allowed a remote attacker to potentially exploit he

Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a

Inappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to le