Aggregator

A vulnerability was found in Apple Mac OS X up to 10.8 and classified as critical. This issue affects some unknown processing. The manipulation leads to numeric error. The identification of this vulnerability is CVE-2014-1261. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Apple Mac OS X up to 10.8. It has been classified as critical. Affected is an unknown function of the component App Sandbox. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2014-1262. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

根据德国联邦统计局发布的数据，2024 年在德国 16-74 岁人群中有 280 万人从未使用过互联网，这部分人被称为“离线者”（offliners）。65-74 岁人群在离线者占比最大，年龄越小离线者越少。德国互联网使用率在欧洲大致处于平均水平。4% 的比例略低于欧盟 5% 的平均水平。荷兰和瑞典的互联网用户比例最高，离线者仅占不到 1% 的比例。而克罗地亚和希腊最高分别达到了 14% 和 11%。根据联合国国际电信联盟（ITU）的数据，2024 年全球约 32%的人口没有使用互联网，“互联网使用与地区发展的水平密切相关。”

A vulnerability was found in Apple QuickTime up to 7.7.4 and classified as critical. This issue affects some unknown processing of the component stsz Handler. The manipulation as part of Movie File leads to numeric error. The identification of this vulnerability is CVE-2014-1245. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Apple QuickTime up to 7.7.4. It has been classified as critical. Affected is an unknown function of the component ftab Handler. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2014-1246. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Apple QuickTime up to 7.7.4. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component dref Handler. The manipulation leads to memory corruption. This vulnerability is known as CVE-2014-1247. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Apple QuickTime up to 7.7.4. This issue affects some unknown processing of the component Track List Handler. The manipulation leads to memory corruption. The identification of this vulnerability is CVE-2014-1243. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Apple QuickTime up to 7.7.4. Affected is an unknown function of the component H.264 Handler. The manipulation as part of Movie File leads to memory corruption. This vulnerability is traded as CVE-2014-1244. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability has been found in Cisco Unified Communications Manager 10.0(1.10000.3) and classified as critical. This vulnerability affects unknown code of the component Certificate Authority Proxy Function. The manipulation leads to improper input validation. This vulnerability was named CVE-2014-0747. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Cisco Unified Communications Manager 10.0(1.10000.3) and classified as problematic. This issue affects some unknown processing of the component Call Detail Records Analysis/Reporting Page. The manipulation leads to cross-site request forgery. The identification of this vulnerability is CVE-2014-0740. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in Cisco Unified Communications Manager 10.0(1.10000.3). It has been classified as problematic. Affected is an unknown function of the component Certificate Authority Proxy Function. The manipulation leads to improper authentication. This vulnerability is traded as CVE-2014-0743. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability was found in Cisco Unified Communications Manager 10.0(1.10000.3). It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component CAPF Certificate Signing Request Handler. The manipulation leads to improper input validation. This vulnerability is known as CVE-2014-0742. The attack needs to be approached locally. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability was found in Cisco Unified Communications Manager 10.0(1.10000.3). It has been rated as critical. Affected by this issue is some unknown functionality of the component CAPF Certificate Import Handler. The manipulation leads to cryptographic issues. This vulnerability is handled as CVE-2014-0741. An attack has to be approached locally. There is no exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability classified as problematic has been found in Cisco Unified Contact Center Express 10.0(1). This affects an unknown part of the component Cisco Unified Serviceability. The manipulation leads to cross-site request forgery. This vulnerability is uniquely identified as CVE-2014-0745. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is recommended to apply a patch to fix this issue.

A vulnerability, which was classified as problematic, has been found in Cisco Unified Contact Center Express 10.0(1). This issue affects some unknown processing of the component Disaster Recovery System. The manipulation leads to information disclosure. The identification of this vulnerability is CVE-2014-0746. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Norman Security Suite up to 10.1. It has been rated as critical. Affected by this issue is some unknown functionality of the component Authorization Handler. The manipulation leads to improper access controls. This vulnerability is handled as CVE-2014-0816. Local access is required to approach this attack. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Cybozu Garoon. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to improper access controls. The identification of this vulnerability is CVE-2014-0817. The attack may be initiated remotely. There is no exploit available.

A vulnerability classified as problematic has been found in Cybozu Garoon. Affected is an unknown function. The manipulation leads to path traversal. This vulnerability is traded as CVE-2014-0820. It is possible to launch the attack remotely. There is no exploit available.

A vulnerability classified as critical was found in Cybozu Garoon. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql injection. This vulnerability is known as CVE-2014-0821. The attack can be launched remotely. There is no exploit available.

A new class of supply chain attacks named 'slopsquatting' has emerged from the increased use of generative AI tools for coding and the model's tendency to "hallucinate" non-existent package names. [...]