ISHACK AI BOT

OS X update for Messages (CVE-2023-0054) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

OS X update for Quick Look (CVE-2023-0054) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

Debian: CVE-2023-0051: vim -- security update Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 07/31/2024 Added 07/30/2024 Modified 01/28/2025 Description Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144. Solution(s) debian-upgrade-vim References https://attackerkb.com/topics/cve-2023-0051 CVE - 2023-0051

OS X update for PackageKit (CVE-2023-0054) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

OS X update for AppleMobileFileIntegrity (CVE-2023-0054) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

Debian: CVE-2023-22464: viewvc -- security update Severity 5 CVSS (AV:N/AC:M/Au:S/C:P/I:P/A:N) Published 01/04/2023 Created 01/13/2023 Added 01/12/2023 Modified 01/30/2025 Description ViewVC is a browser interface for CVS and Subversion version control repositories. Versions prior to 1.2.3 and 1.1.30 are vulnerable to cross-site scripting. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges to a Subversion repository exposed by an otherwise trusted ViewVC instance. The attack vector involves files with unsafe names (names that, when embedded into an HTML stream, would cause the browser to run unwanted code), which themselves can be challenging to create. Users should update to at least version 1.2.3 (if they are using a 1.2.x version of ViewVC) or 1.1.30 (if they are using a 1.1.x version). ViewVC 1.0.x is no longer supported, so users of that release lineage should implement one of the following workarounds. Users can edit their ViewVC EZT view templates to manually HTML-escape changed path "copyfrom paths" during rendering. Locate in your template set's `revision.ezt` file references to those changed paths, and wrap them with `[format "html"]` and `[end]`.For most users, that means that references to `[changes.copy_path]` will become `[format "html"][changes.copy_path][end]`. (This workaround should be reverted after upgrading to a patched version of ViewVC, else "copyfrom path" names will be doubly escaped.) Solution(s) debian-upgrade-viewvc References https://attackerkb.com/topics/cve-2023-22464 CVE - 2023-22464 DLA-3266-1

OS X update for LaunchServices (CVE-2023-0054) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

VMware Photon OS: CVE-2023-0049 Severity 7 CVSS (AV:L/AC:L/Au:S/C:C/I:C/A:C) Published 01/04/2023 Created 01/21/2025 Added 01/20/2025 Modified 02/04/2025 Description Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143. Solution(s) vmware-photon_os_update_tdnf References https://attackerkb.com/topics/cve-2023-0049 CVE - 2023-0049

OS X update for Archive Utility (CVE-2023-0051) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

OS X update for Carbon Core (CVE-2023-0049) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

OS X update for Photos (CVE-2023-0051) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

OS X update for iCloud (CVE-2023-0049) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

OS X update for TCC (CVE-2023-0051) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

OS X update for TCC (CVE-2023-0049) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

OS X update for Model I/O (CVE-2023-0051) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

OS X update for Vim (CVE-2023-0049) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 05/05/2023 Added 04/12/2023 Modified 01/28/2025 Description Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143. Solution(s) apple-osx-upgrade-13_3 References https://attackerkb.com/topics/cve-2023-0049 CVE - 2023-0049 https://support.apple.com/kb/HT213670 https://support.apple.com/kb/HT213675 https://support.apple.com/kb/HT213677

OS X update for TextKit (CVE-2023-0049) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

OS X update for Vim (CVE-2023-0051) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 05/05/2023 Added 04/12/2023 Modified 01/28/2025 Description Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144. Solution(s) apple-osx-upgrade-13_3 References https://attackerkb.com/topics/cve-2023-0051 CVE - 2023-0051 https://support.apple.com/kb/HT213670 https://support.apple.com/kb/HT213675 https://support.apple.com/kb/HT213677

OS X update for TextKit (CVE-2023-0051) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

OS X update for AMD (CVE-2023-0051) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

OS X update for System Settings (CVE-2023-0051) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

OS X update for AppleScript (CVE-2023-0049) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

OS X update for AMD (CVE-2023-0054) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

OS X update for AppleScript (CVE-2023-0051) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

OS X update for CommCenter (CVE-2023-0051) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)