deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-30367
Published: 2023-07-26
Description: Multi-Remote Next Generation Connection Manager (mRemoteNG) is free software that enables users to store and manage multi-protocol connection configurations to remotely connect to systems. mRemoteNG configuration files can be stored in an encrypted state on disk. mRemoteNG version <= v1.76.20 and <= 1.77.3-dev loads configuration files in plain text into memory (after decrypting them if necessary) at application start-up, even if no connection has been established yet. This allows attackers to access contents of configuration files in plain text through a memory dump and thus compromise user credentials when no custom password encryption key has been set. This also bypasses the connection configuration file encryption setting by dumping already decrypted configurations from memory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: http://packetstormsecurity.com/files/173829/mRemoteNG-1.77.3.1784-NB-Sensitive-Information-Extraction.html; https://github.com/S1lkys/CVE-2023-30367-mRemoteNG-password-dumper; https://github.com/mRemoteNG/mRemoteNG/issues/2420
CVE: CVE-2023-32001
Published: 2023-07-26
Description: Rejected reason: We issued this CVE pre-maturely, as we have subsequently realized that this issue points out a problem that there really is no safe measures around or protections for.
CVE: CVE-2023-37692
Published: 2023-07-26
Description: An arbitrary file upload vulnerability in October CMS v3.4.4 allows attackers to execute arbitrary code via a crafted file.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://okankurtulus.com.tr/2023/07/24/october-cms-v3-4-4-stored-cross-site-scripting-xss-authenticated/; https://okankurtulus.com.tr/2023/07/24/october-cms-v3-4-4-stored-cross-site-scripting-xss-authenticated/
CVE: CVE-2023-37732
Published: 2023-07-26
Description: Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://gist.github.com/ChanStormstout/02eea9cf5c002b42b2ff3de5ca939520; https://github.com/yasm/yasm/issues/233; https://gist.github.com/ChanStormstout/02eea9cf5c002b42b2ff3de5ca939520
CVE: CVE-2023-38285
Published: 2023-07-26
Description: Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity.
CVSS Score: 7.5 (HIGH)
CWE: CWE-407
References: https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/modsecurity-v3-dos-vulnerability-in-four-transformations-cve-2023-38285/; https://www.trustwave.com/en-us/resources/security-resources/software-updates/end-of-sale-and-trustwave-support-for-modsecurity-web-application-firewall/; https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/modsecurity-v3-dos-vulnerability-in-four-transformations-cve-2023-38285/
CVE: CVE-2023-28013
Published: 2023-07-26
Description: HCL Verse is susceptible to a Reflected Cross Site Scripting (XSS) vulnerability.  By tricking a user into entering crafted markup a remote, unauthenticated attacker could execute script in a victim's web browser to perform operations as the victim and/or steal the victim's cookies, session tokens, or other sensitive information.

CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0105905; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0105905
CVE: CVE-2023-3451
Published: 2023-07-26
Description: Rejected reason: Duplicate CVE. Please use CVE-2023-32297.
CVE: CVE-2023-28012
Published: 2023-07-27
Description: HCL BigFix Mobile is vulnerable to a command injection attack. An authenticated attacker could run arbitrary shell commands on the WebUI server.

CVSS Score: 5.4 (MEDIUM)
CWE: CWE-77
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106372; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106372
CVE: CVE-2023-28014
Published: 2023-07-27
Description: HCL BigFix Mobile is vulnerable to a cross-site scripting attack. An authenticated attacker could inject malicious scripts into the application.

CVSS Score: 6.6 (MEDIUM)
CWE: CWE-79
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106371; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0106371
CVE: CVE-2023-32381
Published: 2023-07-27
Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.6.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/en-us/HT213841; https://support.apple.com/en-us/HT213843; https://support.apple.com/en-us/HT213844
CVE: CVE-2023-32433
Published: 2023-07-27
Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/en-us/HT213841; https://support.apple.com/en-us/HT213842; https://support.apple.com/en-us/HT213843
CVE: CVE-2023-32437
Published: 2023-07-27
Description: The issue was addressed with improvements to the file handling protocol. This issue is fixed in iOS 16.6 and iPadOS 16.6. An app may be able to break out of its sandbox.
CVSS Score: 8.6 (HIGH)
References: https://support.apple.com/en-us/HT213841; https://support.apple.com/kb/HT213757; https://support.apple.com/kb/HT213758
CVE: CVE-2023-35983
Published: 2023-07-27
Description: This issue was addressed with improved data protection. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. An app may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-863
References: https://support.apple.com/en-us/HT213843; https://support.apple.com/en-us/HT213844; https://support.apple.com/en-us/HT213845
CVE: CVE-2023-36854
Published: 2023-07-27
Description: The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. Processing a file may lead to unexpected app termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT213843; https://support.apple.com/en-us/HT213844; https://support.apple.com/en-us/HT213845
CVE: CVE-2023-36862
Published: 2023-07-27
Description: A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Ventura 13.5. An app may be able to determine a user’s current location.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213843; https://support.apple.com/en-us/HT213843
CVE: CVE-2023-37450
Published: 2023-07-27
Description: The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5, watchOS 9.6. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
CVSS Score: 8.8 (HIGH)
References: https://security.gentoo.org/glsa/202401-04; https://support.apple.com/en-us/HT213826; https://support.apple.com/en-us/HT213841
CVE: CVE-2023-38133
Published: 2023-07-27
Description: The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may disclose sensitive information.
CVSS Score: 6.5 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2023/08/02/1; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/
CVE: CVE-2023-38410
Published: 2023-07-27
Description: The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A user may be able to elevate privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://support.apple.com/en-us/HT213841; https://support.apple.com/en-us/HT213843; https://support.apple.com/en-us/HT213841
CVE: CVE-2023-38594
Published: 2023-07-27
Description: The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
References: http://www.openwall.com/lists/oss-security/2023/08/02/1; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/
CVE: CVE-2023-38597
Published: 2023-07-27
Description: The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5, Safari 16.6. Processing web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
References: http://www.openwall.com/lists/oss-security/2023/08/02/1; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/
CVE: CVE-2023-38606
Published: 2023-07-27
Description: This issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to modify sensitive kernel state. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213841; https://support.apple.com/en-us/HT213842; https://support.apple.com/en-us/HT213843
CVE: CVE-2023-32364
Published: 2023-07-27
Description: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13.5. A sandboxed process may be able to circumvent sandbox restrictions.
CVSS Score: 8.6 (HIGH)
References: https://support.apple.com/en-us/HT213843; https://support.apple.com/kb/HT213844; https://support.apple.com/kb/HT213845
CVE: CVE-2023-32393
Published: 2023-07-27
Description: The issue was addressed with improved memory handling. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. Processing web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
References: https://security.gentoo.org/glsa/202401-04; https://support.apple.com/en-us/HT213599; https://support.apple.com/en-us/HT213601
CVE: CVE-2023-32416
Published: 2023-07-27
Description: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5, watchOS 9.6. An app may be able to read sensitive location information.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213841; https://support.apple.com/en-us/HT213842; https://support.apple.com/en-us/HT213843
CVE: CVE-2023-32418
Published: 2023-07-27
Description: The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. Processing a file may lead to unexpected app termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://support.apple.com/en-us/HT213843; https://support.apple.com/en-us/HT213844; https://support.apple.com/en-us/HT213845
CVE: CVE-2023-32429
Published: 2023-07-27
Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. An app may be able to bypass Privacy preferences.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213843; https://support.apple.com/kb/HT213844; https://support.apple.com/kb/HT213845
CVE: CVE-2023-32441
Published: 2023-07-27
Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT213841; https://support.apple.com/en-us/HT213842; https://support.apple.com/en-us/HT213843
CVE: CVE-2023-32442
Published: 2023-07-27
Description: An access issue was addressed with improved access restrictions. This issue is fixed in macOS Ventura 13.5, macOS Monterey 12.6.8. A shortcut may be able to modify sensitive Shortcuts app settings.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213843; https://support.apple.com/en-us/HT213844; https://support.apple.com/en-us/HT213843
CVE: CVE-2023-32443
Published: 2023-07-27
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. Processing a file may lead to a denial-of-service or potentially disclose memory contents.
CVSS Score: 8.1 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213843; https://support.apple.com/en-us/HT213844; https://support.apple.com/en-us/HT213845
CVE: CVE-2023-32734
Published: 2023-07-27
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, watchOS 9.6. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT213841; https://support.apple.com/en-us/HT213843; https://support.apple.com/en-us/HT213846
CVE: CVE-2023-35993
Published: 2023-07-27
Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/en-us/HT213841; https://support.apple.com/en-us/HT213842; https://support.apple.com/en-us/HT213843
CVE: CVE-2023-38136
Published: 2023-07-27
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, watchOS 9.6. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT213841; https://support.apple.com/en-us/HT213848; https://support.apple.com/en-us/HT213841
CVE: CVE-2023-38258
Published: 2023-07-27
Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5, macOS Monterey 12.6.8. Processing a 3D model may result in disclosure of process memory.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213843; https://support.apple.com/en-us/HT213844; https://support.apple.com/en-us/HT213843
CVE: CVE-2023-38259
Published: 2023-07-27
Description: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. An app may be able to access user-sensitive data.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213843; https://support.apple.com/en-us/HT213844; https://support.apple.com/en-us/HT213845
CVE: CVE-2023-38261
Published: 2023-07-27
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT213841; https://support.apple.com/en-us/HT213843; https://support.apple.com/en-us/HT213841
CVE: CVE-2023-38421
Published: 2023-07-27
Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5, macOS Monterey 12.6.8. Processing a 3D model may result in disclosure of process memory.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213843; https://support.apple.com/en-us/HT213844; https://support.apple.com/en-us/HT213843
CVE: CVE-2023-38424
Published: 2023-07-27
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT213841; https://support.apple.com/en-us/HT213843; https://support.apple.com/en-us/HT213841
CVE: CVE-2023-38425
Published: 2023-07-27
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.2 (HIGH)
References: https://support.apple.com/en-us/HT213841; https://support.apple.com/en-us/HT213843; https://support.apple.com/en-us/HT213841
CVE: CVE-2023-38564
Published: 2023-07-27
Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. An app may be able to modify protected parts of the file system.
CVSS Score: 7.5 (HIGH)
References: https://support.apple.com/en-us/HT213843; https://support.apple.com/en-us/HT213843
CVE: CVE-2023-38565
Published: 2023-07-27
Description: A path handling issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.6.8, iOS 16.6 and iPadOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT213841; https://support.apple.com/en-us/HT213843; https://support.apple.com/en-us/HT213844
CVE: CVE-2023-38572
Published: 2023-07-27
Description: The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. A website may be able to bypass Same Origin Policy.
CVSS Score: 7.5 (HIGH)
References: http://www.openwall.com/lists/oss-security/2023/08/02/1; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/
CVE: CVE-2023-38580
Published: 2023-07-27
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5, watchOS 9.6. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT213841; https://support.apple.com/en-us/HT213843; https://support.apple.com/en-us/HT213848
CVE: CVE-2023-38593
Published: 2023-07-27
Description: A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.8, iOS 16.6 and iPadOS 16.6, macOS Big Sur 11.7.9, macOS Ventura 13.5, watchOS 9.6. An app may be able to cause a denial-of-service.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213841; https://support.apple.com/en-us/HT213843; https://support.apple.com/en-us/HT213844
CVE: CVE-2023-38595
Published: 2023-07-27
Description: The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
References: http://www.openwall.com/lists/oss-security/2023/08/02/1; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/
CVE: CVE-2023-38600
Published: 2023-07-27
Description: The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
References: http://www.openwall.com/lists/oss-security/2023/08/02/1; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/
CVE: CVE-2023-38602
Published: 2023-07-27
Description: A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. An app may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213843; https://support.apple.com/en-us/HT213844; https://support.apple.com/en-us/HT213845
CVE: CVE-2023-38603
Published: 2023-07-27
Description: The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A remote user may be able to cause a denial-of-service.
CVSS Score: 7.5 (HIGH)
References: https://support.apple.com/en-us/HT213841; https://support.apple.com/en-us/HT213843; https://support.apple.com/kb/HT213842
CVE: CVE-2023-38608
Published: 2023-07-27
Description: The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.5. An app may be able to access user-sensitive data.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213843; https://support.apple.com/en-us/HT213843
CVE: CVE-2023-38611
Published: 2023-07-27
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, tvOS 16.6, macOS Ventura 13.5, Safari 16.6, watchOS 9.6. Processing web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
References: http://www.openwall.com/lists/oss-security/2023/08/02/1; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ4DG5LHWG2INDOTPB7MO4JVJN6LKL3M/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQXJYKTGLKI6TJEFJCKPHCNY7PS72OER/
CVE: CVE-2023-32450
Published: 2023-07-27
Description: 
Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access.


CVSS Score: 6.1 (MEDIUM)
CWE: CWE-379
References: https://www.dell.com/support/kbdoc/en-us/000215215/dsa-2023-181-dell-power-manager-security-update-for-an-improper-access-control-vulnerability; https://www.dell.com/support/kbdoc/en-us/000215215/dsa-2023-181-dell-power-manager-security-update-for-an-improper-access-control-vulnerability