Apple

macOS

2458 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2022-29046

  • EPSS 20%
  • Veröffentlicht 12.04.2022 20:15:09
  • Zuletzt bearbeitet 21.11.2024 06:58:24

Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name and description of List Subversion tags (and more) parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attacker...

4.3

CVE-2022-29048

  • EPSS 0.1%
  • Veröffentlicht 12.04.2022 20:15:09
  • Zuletzt bearbeitet 21.11.2024 06:58:24

A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Plugin 2.15.3 and earlier allows attackers to connect to an attacker-specified URL.

7.5

CVE-2022-24070

  • EPSS 0.88%
  • Veröffentlicht 12.04.2022 18:15:09
  • Zuletzt bearbeitet 21.11.2024 06:49:45

Subversion's mod_dav_svn is vulnerable to memory corruption. While looking up path-based authorization rules, mod_dav_svn servers may attempt to use memory which has already been freed. Affected Subversion mod_dav_svn servers 1.10.0 through 1.14.1 (i...

4.3

CVE-2021-28544

Exploit
  • EPSS 0.42%
  • Veröffentlicht 12.04.2022 18:15:08
  • Zuletzt bearbeitet 21.11.2024 05:59:49

Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization (authz) rules. When a node has been copied from a protected location, us...

7.5

CVE-2022-24836

  • EPSS 1.45%
  • Veröffentlicht 11.04.2022 22:15:07
  • Zuletzt bearbeitet 21.11.2024 06:51:12

Nokogiri is an open source XML and HTML library for Ruby. Nokogiri `< v1.13.4` contains an inefficient regular expression that is susceptible to excessive backtracking when attempting to detect encoding in HTML documents. Users are advised to upgrade...

7.5

CVE-2018-25032

Exploit
  • EPSS 0.08%
  • Veröffentlicht 25.03.2022 09:15:08
  • Zuletzt bearbeitet 21.08.2025 20:37:11

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

9.3

CVE-2022-22661

  • EPSS 0.38%
  • Veröffentlicht 18.03.2022 18:15:15
  • Zuletzt bearbeitet 21.11.2024 06:47:13

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to execute arbitrary code with kernel privileges.

7.8

CVE-2022-22664

  • EPSS 0.69%
  • Veröffentlicht 18.03.2022 18:15:15
  • Zuletzt bearbeitet 21.11.2024 06:47:13

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code ex...

9.3

CVE-2022-22665

  • EPSS 0.34%
  • Veröffentlicht 18.03.2022 18:15:15
  • Zuletzt bearbeitet 21.11.2024 06:47:13

A logic issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.3. A malicious application may be able to gain root privileges.

7.8

CVE-2022-22669

  • EPSS 0.07%
  • Veröffentlicht 18.03.2022 18:15:15
  • Zuletzt bearbeitet 21.11.2024 06:47:14

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3. An application may be able to execute arbitrary code with kernel privileges.