CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2023-42847
https://notcve.org/view.php?id=CVE-2023-42847
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An attacker may be able to access passkeys without authentication. Se solucionó un problema de lógica con controles mejorados. Este problema se solucionó en macOS Sonoma 14.1, iOS 17.1 y iPadOS 17.1. • http://seclists.org/fulldisclosure/2023/Oct/19 http://seclists.org/fulldisclosure/2023/Oct/24 https://support.apple.com/en-us/HT213982 https://support.apple.com/en-us/HT213984 https://support.apple.com/kb/HT213982 https://support.apple.com/kb/HT213984 •
CVSS: 4.3EPSS: 0%CPEs: 4EXPL: 0CVE-2023-5726
https://notcve.org/view.php?id=CVE-2023-5726
A website could have obscured the full screen notification by using the file open dialog. This could have led to user confusion and possible spoofing attacks. *Note: This issue only affected macOS operating systems. Other operating systems are unaffected.* This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1. Un sitio web podría haber oscurecido la notificación de pantalla completa utilizando el cuadro de diálogo de apertura de archivo. Esto podría haber generado confusión en los usuarios y posibles ataques de suplantación de identidad. • https://bugzilla.mozilla.org/show_bug.cgi?id=1846205 https://www.mozilla.org/security/advisories/mfsa2023-45 https://www.mozilla.org/security/advisories/mfsa2023-46 https://www.mozilla.org/security/advisories/mfsa2023-47 •
CVSS: 5.3EPSS: 0%CPEs: 3EXPL: 0CVE-2022-43891 – IBM Security Verify Privilege information disclosure
https://notcve.org/view.php?id=CVE-2022-43891
IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 240454. IBM Security Verify Privilege On-Premises 11.5 podría permitir a un atacante remoto obtener información confidencial cuando se devuelve un mensaje de error técnico detallado en el navegador. Esta información podría usarse en futuros ataques contra el System. • https://exchange.xforce.ibmcloud.com/vulnerabilities/240454 https://www.ibm.com/support/pages/node/7047202 • CWE-209: Generation of Error Message Containing Sensitive Information •
CVSS: 5.3EPSS: 0%CPEs: 3EXPL: 0CVE-2022-43892 – IBM Security Verify Privilege information disclosure
https://notcve.org/view.php?id=CVE-2022-43892
IBM Security Verify Privilege On-Premises 11.5 does not validate, or incorrectly validates, a certificate which could disclose sensitive information which could aid further attacks against the system. IBM X-Force ID: 240455. IBM Security Verify Privilege On-Premises 11.5 no valida, o valida incorrectamente, un certificado que podría revelar información confidencial que podría contribuir a futuros ataques contra el System. ID de IBM X-Force: 240455. • https://exchange.xforce.ibmcloud.com/vulnerabilities/240455 https://www.ibm.com/support/pages/node/7047202 • CWE-295: Improper Certificate Validation •
CVSS: 4.4EPSS: 0%CPEs: 3EXPL: 0CVE-2022-43893 – IBM Security Verify Privilege denial of service
https://notcve.org/view.php?id=CVE-2022-43893
IBM Security Verify Privilege On-Premises 11.5 could allow a privileged user to cause by using a malicious payload. IBM X-Force ID: 240634. IBM Security Verify Privilege On-Premises 11.5 podría permitir que un usuario privilegiado cause una vulnerabilidad por el consumo de recursos de un payload malicioso. ID de IBM X-Force: 240634. • https://exchange.xforce.ibmcloud.com/vulnerabilities/240534 https://www.ibm.com/support/pages/node/7047202 • CWE-400: Uncontrolled Resource Consumption •