Nov 21, 2024
0 new incidents, 2 with updates.
Updated
- ClosedPatched
Apple Multiple Products: 2 actively exploited vulnerabilities
CVE-2024-44308: Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to arbitrary code execution. CVE-2024-44309: Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to a cross-site scripting (XSS) attack. Added to the CISA KEV catalog on 2024-11-21.
Apple Multiple ProductsClosed Nov 21, 2024
- ClosedPatched
Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization
Oracle Agile Product Lifecycle Management (PLM) contains an incorrect authorization vulnerability in the Process Extension component of the Software Development Kit. Successful exploitation of this vulnerability may result in unauthenticated file disclosure. Added to the CISA KEV catalog on 2024-11-21.
Oracle Agile Product Lifecycle Management (PLM)Closed Nov 21, 2024