CVEs

129,612 total · page 2210 of 2,593

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2019-1003057	Jenkins Project Bitbucket Approve	Hig	0.57	8.8	0.01	Apr 4, 2019	Jenkins Bitbucket Approve Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVE-2019-1003056	Jenkins Project Websphere Deployer	Hig	0.57	8.8	0.01	Apr 4, 2019	Jenkins WebSphere Deployer Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
CVE-2019-1003055	Jenkins Project FTP Publisher	Hig	0.57	8.8	0.01	Apr 4, 2019	Jenkins FTP publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVE-2019-1003054	Jenkins Project Jira Issue Updater	Hig	0.57	8.8	0.01	Apr 4, 2019	Jenkins Jira Issue Updater Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
CVE-2019-1003053	Jenkins Project Hockeyapp	Hig	0.57	8.8	0.01	Apr 4, 2019	Jenkins HockeyApp Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
CVE-2019-1003052	Jenkins Project AWS Elastic Beanstalk Publisher	Hig	0.57	8.8	0.01	Apr 4, 2019	Jenkins AWS Elastic Beanstalk Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVE-2019-1003051	Jenkins Project Irc	Hig	0.57	8.8	0.01	Apr 4, 2019	Jenkins IRC Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVE-2018-19981	AWS Amplify AWS SDK Android	Hig	0.47	7.2	0.02	Apr 4, 2019	Amazon AWS SDK <=2.8.5 for Android uses Android SharedPreferences to store plain text AWS STS Temporary Credentials retrieved by AWS Cognito Identity Service. An attacker can use these credentials to create authenticated and/or authorized requests. Note that the attacker must…
CVE-2018-13918	Qualcomm kernel	Hig	0.51	7.8	0.00	Apr 4, 2019	kernel could return a received message length higher than expected, which leads to buffer overflow in a subsequent operation and stops normal operation in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, in MDM9150,…
CVE-2018-11970	Qualcomm Snapdragon	Hig	0.51	7.8	0.00	Apr 4, 2019	TZ App dynamic allocations not protected from XBL loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 410/12, SD 636,…
CVE-2018-11966	Qualcomm Snapdragon	Hig	0.51	7.8	0.00	Apr 4, 2019	Undefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU,…
CVE-2018-11830	Qualcomm Snapdragon Auto	Hig	0.51	7.8	0.00	Apr 4, 2019	Improper input validation in QCPE create function may lead to integer overflow in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, SD 410/12, SD 820A
CVE-2018-10242	Suricata Suricata	Hig	0.49	7.5	0.02	Apr 4, 2019	Suricata version 4.0.4 incorrectly handles the parsing of the SSH banner. A malformed SSH banner can cause the parsing code to read beyond the allocated data because SSHParseBanner in app-layer-ssh.c lacks a length check.
CVE-2015-5384	AxiomSL Axiom	Hig	0.57	8.8	0.02	Apr 3, 2019	AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier is vulnerable to a Session Fixation attack.
CVE-2015-5606	Axway Vordel XML Gateway	Hig	0.49	7.5	0.02	Apr 3, 2019	Vordel XML Gateway (acquired by Axway) version 7.2.2 could allow remote attackers to cause a denial of service via a specially crafted request.
CVE-2019-10240	Eclipse hawkBit	Hig	0.53	8.1	0.00	Apr 3, 2019	Eclipse hawkBit versions prior to 0.3.0M2 resolved Maven build artifacts for the Vaadin based UI over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by a MITM attack. Hence produced build artifacts of hawkBit might be infected.
CVE-2018-4465	Apple Inc. macOS	Hig	0.51	7.8	0.01	Apr 3, 2019	A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.
CVE-2018-4464	Apple Inc. Safari	Hig	0.57	8.8	0.01	Apr 3, 2019	Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
CVE-2018-4463	Apple Inc. macOS	Hig	0.51	7.8	0.01	Apr 3, 2019	A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.2.
CVE-2018-4461	Apple Inc. tvOS	Hig	0.51	7.8	0.01	Apr 3, 2019	A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.
CVE-2018-4456	Apple Inc. macOS	Hig	0.51	7.8	0.01	Apr 3, 2019	A memory corruption issue was addressed with improved input validation. This issue affected versions prior to macOS High Sierra 10.13.6, macOS Mojave 10.14.
CVE-2018-4450	Apple Inc. macOS	Hig	0.51	7.8	0.01	Apr 3, 2019	A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.2.
CVE-2018-4449	Apple Inc. macOS	Hig	0.51	7.8	0.01	Apr 3, 2019	A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.2.
CVE-2018-4447	Apple Inc. tvOS	Hig	0.51	7.8	0.01	Apr 3, 2019	A memory corruption issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.
CVE-2018-4443	Apple Inc. Safari	Hig	0.61	8.8	0.06	Apr 3, 2019	A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
CVE-2018-4442	Apple Inc. Safari	Hig	0.61	8.8	0.06	Apr 3, 2019	A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
CVE-2018-4441	Apple Inc. Safari	Hig	0.61	8.8	0.13	Apr 3, 2019	A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
CVE-2018-4438	Apple Inc. Safari	Hig	0.61	8.8	0.06	Apr 3, 2019	A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
CVE-2018-4437	Apple Inc. Safari	Hig	0.57	8.8	0.01	Apr 3, 2019	Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
CVE-2018-4436	Apple Inc. tvOS	Hig	0.49	7.5	0.01	Apr 3, 2019	A certificate validation issue existed in configuration profiles. This was addressed with additional checks. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2.
CVE-2018-4435	Apple Inc. tvOS	Hig	0.54	7.8	0.03	Apr 3, 2019	A logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.
CVE-2018-4434	Apple Inc. macOS	Hig	0.46	7.1	0.00	Apr 3, 2019	An out-of-bounds read was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.2.
CVE-2018-4427	Apple Inc. tvOS	Hig	0.51	7.8	0.01	Apr 3, 2019	A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to: iOS 12.1, watchOS 5.1.2, tvOS 12.1.1, macOS High Sierra 10.13.6 Security Update 2018-003 High Sierra, macOS Sierra 10.12.6 Security Update 2018-006.
CVE-2018-4426	Apple Inc. tvOS	Hig	0.51	7.8	0.01	Apr 3, 2019	A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVE-2018-4425	Apple Inc. tvOS	Hig	0.51	7.8	0.01	Apr 3, 2019	A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVE-2018-4424	Apple Inc. macOS	Hig	0.51	7.8	0.01	Apr 3, 2019	A buffer overflow was addressed with improved size validation. This issue affected versions prior to macOS Mojave 10.14.1.
CVE-2018-4423	Apple Inc. macOS Mojave	Hig	0.51	7.8	0.01	Apr 3, 2019	A logic issue was addressed with improved validation. This issue affected versions prior to macOS Mojave 10.14.1.
CVE-2018-4422	Apple Inc. macOS	Hig	0.57	8.8	0.01	Apr 3, 2019	A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1.
CVE-2018-4421	Apple Inc. macOS Mojave	Hig	0.51	7.8	0.01	Apr 3, 2019	A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1.
CVE-2018-4420	Apple Inc. tvOS	Hig	0.51	7.8	0.01	Apr 3, 2019	A memory corruption issue was addressed by removing the vulnerable code. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1.
CVE-2018-4419	Apple Inc. tvOS	Hig	0.51	7.8	0.01	Apr 3, 2019	A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1.
CVE-2018-4416	Apple Inc. Safari	Hig	0.63	8.8	0.35	Apr 3, 2019	Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.
CVE-2018-4415	Apple Inc. macOS	Hig	0.51	7.8	0.01	Apr 3, 2019	A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1.
CVE-2018-4414	Apple Inc. iTunes	Hig	0.51	7.8	0.01	Apr 3, 2019	A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5, iTunes 12.9 for Windows, iCloud for Windows 7.7.
CVE-2018-4412	Apple Inc. iTunes	Hig	0.51	7.8	0.01	Apr 3, 2019	A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5, iTunes 12.9 for Windows, iCloud for Windows 7.7.
CVE-2018-4411	Apple Inc. macOS Mojave	Hig	0.51	7.8	0.01	Apr 3, 2019	A memory corruption issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.
CVE-2018-4410	Apple Inc. macOS	Hig	0.51	7.8	0.01	Apr 3, 2019	A memory corruption issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.1.
CVE-2018-4408	Apple Inc. tvOS	Hig	0.51	7.8	0.01	Apr 3, 2019	A memory corruption issue was addressed with improved input validation This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVE-2018-4407	Apple Inc. tvOS	Hig	0.59	8.8	0.21	Apr 3, 2019	A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVE-2018-4402	Apple Inc. macOS	Hig	0.51	7.8	0.01	Apr 3, 2019	A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1.

CVE-2019-1003057HigApr 4, 2019
Jenkins Project
Bitbucket Approve
risk 0.57cvss 8.8epss 0.01
Jenkins Bitbucket Approve Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVE-2019-1003056HigApr 4, 2019
Jenkins Project
Websphere Deployer
risk 0.57cvss 8.8epss 0.01
Jenkins WebSphere Deployer Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
CVE-2019-1003055HigApr 4, 2019
Jenkins Project
FTP Publisher
risk 0.57cvss 8.8epss 0.01
Jenkins FTP publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVE-2019-1003054HigApr 4, 2019
Jenkins Project
Jira Issue Updater
risk 0.57cvss 8.8epss 0.01
Jenkins Jira Issue Updater Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
CVE-2019-1003053HigApr 4, 2019
Jenkins Project
Hockeyapp
risk 0.57cvss 8.8epss 0.01
Jenkins HockeyApp Plugin stores credentials unencrypted in job config.xml files on the Jenkins master where they can be viewed by users with Extended Read permission, or access to the master file system.
CVE-2019-1003052HigApr 4, 2019
Jenkins Project
AWS Elastic Beanstalk Publisher
risk 0.57cvss 8.8epss 0.01
Jenkins AWS Elastic Beanstalk Publisher Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVE-2019-1003051HigApr 4, 2019
Jenkins Project
Irc
risk 0.57cvss 8.8epss 0.01
Jenkins IRC Plugin stores credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system.
CVE-2018-19981HigApr 4, 2019
AWS Amplify
AWS SDK Android
risk 0.47cvss 7.2epss 0.02
Amazon AWS SDK <=2.8.5 for Android uses Android SharedPreferences to store plain text AWS STS Temporary Credentials retrieved by AWS Cognito Identity Service. An attacker can use these credentials to create authenticated and/or authorized requests. Note that the attacker must…
CVE-2018-13918HigApr 4, 2019
Qualcomm
kernel
risk 0.51cvss 7.8epss 0.00
kernel could return a received message length higher than expected, which leads to buffer overflow in a subsequent operation and stops normal operation in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, in MDM9150,…
CVE-2018-11970HigApr 4, 2019
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
TZ App dynamic allocations not protected from XBL loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 410/12, SD 636,…
CVE-2018-11966HigApr 4, 2019
Qualcomm
Snapdragon
risk 0.51cvss 7.8epss 0.00
Undefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU,…
CVE-2018-11830HigApr 4, 2019
Qualcomm
Snapdragon Auto
risk 0.51cvss 7.8epss 0.00
Improper input validation in QCPE create function may lead to integer overflow in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MDM9650, MDM9655, MSM8996AU, SD 410/12, SD 820A
CVE-2018-10242HigApr 4, 2019
Suricata
Suricata
risk 0.49cvss 7.5epss 0.02
Suricata version 4.0.4 incorrectly handles the parsing of the SSH banner. A malformed SSH banner can cause the parsing code to read beyond the allocated data because SSHParseBanner in app-layer-ssh.c lacks a length check.
CVE-2015-5384HigApr 3, 2019
AxiomSL
Axiom
risk 0.57cvss 8.8epss 0.02
AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier is vulnerable to a Session Fixation attack.
CVE-2015-5606HigApr 3, 2019
Axway
Vordel XML Gateway
risk 0.49cvss 7.5epss 0.02
Vordel XML Gateway (acquired by Axway) version 7.2.2 could allow remote attackers to cause a denial of service via a specially crafted request.
CVE-2019-10240HigApr 3, 2019
Eclipse
hawkBit
risk 0.53cvss 8.1epss 0.00
Eclipse hawkBit versions prior to 0.3.0M2 resolved Maven build artifacts for the Vaadin based UI over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by a MITM attack. Hence produced build artifacts of hawkBit might be infected.
CVE-2018-4465HigApr 3, 2019
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.01
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.
CVE-2018-4464HigApr 3, 2019
Apple Inc.
Safari
risk 0.57cvss 8.8epss 0.01
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
CVE-2018-4463HigApr 3, 2019
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.01
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.2.
CVE-2018-4461HigApr 3, 2019
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.01
A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.
CVE-2018-4456HigApr 3, 2019
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.01
A memory corruption issue was addressed with improved input validation. This issue affected versions prior to macOS High Sierra 10.13.6, macOS Mojave 10.14.
CVE-2018-4450HigApr 3, 2019
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.01
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.2.
CVE-2018-4449HigApr 3, 2019
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.01
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.2.
CVE-2018-4447HigApr 3, 2019
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.01
A memory corruption issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.
CVE-2018-4443HigApr 3, 2019
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
CVE-2018-4442HigApr 3, 2019
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
CVE-2018-4441HigApr 3, 2019
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.13
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
CVE-2018-4438HigApr 3, 2019
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
CVE-2018-4437HigApr 3, 2019
Apple Inc.
Safari
risk 0.57cvss 8.8epss 0.01
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.
CVE-2018-4436HigApr 3, 2019
Apple Inc.
tvOS
risk 0.49cvss 7.5epss 0.01
A certificate validation issue existed in configuration profiles. This was addressed with additional checks. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2.
CVE-2018-4435HigApr 3, 2019
Apple Inc.
tvOS
risk 0.54cvss 7.8epss 0.03
A logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.
CVE-2018-4434HigApr 3, 2019
Apple Inc.
macOS
risk 0.46cvss 7.1epss 0.00
An out-of-bounds read was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.2.
CVE-2018-4427HigApr 3, 2019
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.01
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to: iOS 12.1, watchOS 5.1.2, tvOS 12.1.1, macOS High Sierra 10.13.6 Security Update 2018-003 High Sierra, macOS Sierra 10.12.6 Security Update 2018-006.
CVE-2018-4426HigApr 3, 2019
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.01
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVE-2018-4425HigApr 3, 2019
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.01
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVE-2018-4424HigApr 3, 2019
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.01
A buffer overflow was addressed with improved size validation. This issue affected versions prior to macOS Mojave 10.14.1.
CVE-2018-4423HigApr 3, 2019
Apple Inc.
macOS Mojave
risk 0.51cvss 7.8epss 0.01
A logic issue was addressed with improved validation. This issue affected versions prior to macOS Mojave 10.14.1.
CVE-2018-4422HigApr 3, 2019
Apple Inc.
macOS
risk 0.57cvss 8.8epss 0.01
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1.
CVE-2018-4421HigApr 3, 2019
Apple Inc.
macOS Mojave
risk 0.51cvss 7.8epss 0.01
A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1.
CVE-2018-4420HigApr 3, 2019
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.01
A memory corruption issue was addressed by removing the vulnerable code. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1.
CVE-2018-4419HigApr 3, 2019
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.01
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1, macOS Mojave 10.14.1, tvOS 12.1, watchOS 5.1.
CVE-2018-4416HigApr 3, 2019
Apple Inc.
Safari
risk 0.63cvss 8.8epss 0.35
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.
CVE-2018-4415HigApr 3, 2019
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.01
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1.
CVE-2018-4414HigApr 3, 2019
Apple Inc.
iTunes
risk 0.51cvss 7.8epss 0.01
A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5, iTunes 12.9 for Windows, iCloud for Windows 7.7.
CVE-2018-4412HigApr 3, 2019
Apple Inc.
iTunes
risk 0.51cvss 7.8epss 0.01
A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5, iTunes 12.9 for Windows, iCloud for Windows 7.7.
CVE-2018-4411HigApr 3, 2019
Apple Inc.
macOS Mojave
risk 0.51cvss 7.8epss 0.01
A memory corruption issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.
CVE-2018-4410HigApr 3, 2019
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.01
A memory corruption issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.1.
CVE-2018-4408HigApr 3, 2019
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.01
A memory corruption issue was addressed with improved input validation This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVE-2018-4407HigApr 3, 2019
Apple Inc.
tvOS
risk 0.59cvss 8.8epss 0.21
A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVE-2018-4402HigApr 3, 2019
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.01
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.1.