Latest CVE Feed
-
7.1
HIGHCVE-2017-13775
GraphicsMagick 1.3.26 has a denial of service issue in ReadJNXImage() in coders/jnx.c whereby large amounts of CPU and memory resources may be consumed although the file itself does not support the requests.... Read more
- Published: Aug. 30, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2017-13810
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows local users to obtain sensitive information by leveraging an error in packet counters.... Read more
- Published: Nov. 13, 2017
- Modified: Apr. 20, 2025
-
7.1
HIGHCVE-2017-13776
GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex image data" version!=10 case that results in the reader not returning; it would cause large amounts of CPU and memory consumption although the crafted file i... Read more
- Published: Aug. 30, 2017
- Modified: Apr. 20, 2025
-
8.8
HIGHCVE-2017-13783
An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "... Read more
- Published: Nov. 13, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2017-13804
An issue was discovered in certain Apple products. iOS before 11.1 is affected. macOS before 10.13.1 is affected. tvOS before 11.1 is affected. watchOS before 4.1 is affected. The issue involves the "StreamingZip" component. It allows remote attackers to ... Read more
- Published: Nov. 13, 2017
- Modified: Apr. 20, 2025
-
8.8
HIGHCVE-2017-13798
An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "... Read more
- Published: Nov. 13, 2017
- Modified: Apr. 20, 2025
-
8.8
HIGHCVE-2017-13794
An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "... Read more
- Published: Nov. 13, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13830
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "HFS" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a craft... Read more
- Published: Nov. 13, 2017
- Modified: Apr. 20, 2025
-
6.1
MEDIUMCVE-2017-14352
A potential security vulnerability has been identified in HP UCMDB Configuration Manager versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.23. These vulnerabilities could be remotely exploited to allow cross-site scripting.... Read more
Affected Products : ucmdb_configuration_manager- Published: Sep. 30, 2017
- Modified: Apr. 20, 2025
-
2.4
LOWCVE-2017-13805
An issue was discovered in certain Apple products. iOS before 11.1 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to obtain sensitive information via a Siri request for private-content notifications that sho... Read more
Affected Products : iphone_os- Published: Nov. 13, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13799
An issue was discovered in certain Apple products. iOS before 11.1 is affected. macOS before 10.13.1 is affected. tvOS before 11.1 is affected. watchOS before 4.1 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbit... Read more
- Published: Nov. 13, 2017
- Modified: Apr. 20, 2025
-
6.1
MEDIUMCVE-2017-13819
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "HelpViewer" component. A cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML by bypassing the ... Read more
- Published: Nov. 13, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-13825
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CoreText" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory consumption) via a crafted font fil... Read more
- Published: Nov. 13, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13867
An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbit... Read more
- Published: Dec. 25, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2017-13818
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.... Read more
- Published: Nov. 13, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2017-13841
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.... Read more
- Published: Nov. 13, 2017
- Modified: Apr. 20, 2025
-
10.0
HIGHCVE-2017-13815
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the third-party "file" product. Versions before 5.31 allow remote attackers to cause a denial of service (application crash) or possibly have unspecifi... Read more
- Published: Nov. 13, 2017
- Modified: Apr. 20, 2025
-
5.9
MEDIUMCVE-2017-13864
An issue was discovered in certain Apple products. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. The issue involves the "APNs Server" component. It allows man-in-the-middle attackers to track users by leveraging mi... Read more
- Published: Dec. 25, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13834
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a cra... Read more
- Published: Nov. 13, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13858
An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "IOKit" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app.... Read more
- Published: Dec. 25, 2017
- Modified: Apr. 20, 2025