166 matches found
CVE-2024-0752
A use-after-free crash could have occurred on macOS if a Firefox update were being applied on a very busy system. This could have resulted in an exploitable crash. This vulnerability affects Firefox 122...
CVE-2024-0752
CVE-2024-0752 refers to a use-after-free crash in Mozilla Firefox that could occur on macOS when applying a Firefox update on a very busy system, leading to an exploitable crash. Affected products: Firefox versions earlier than 122. Root cause: use-after-free in the update path on high system loa...
KLA63223 Multiple vulnerabilities in Mozilla Firefox
Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, obtain sensitive information, execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of...
Oracle Linux 9 : grub2 (ELSA-2023-0752)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-0752 advisory. - Fix CVE-2022-3775 Orabug: 34871953 - Resolves: CVE-2022-2601 Tenable has extracted the preceding description block directly from the Oracle Linux...
SUSE: Security Advisory (SUSE-SU-2023:0752-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-604-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE CVE-2016-0752
Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing...
AlmaLinux 9 : grub2 (ALSA-2023:0752)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:0752 advisory. - A buffer overflow was found in grubfontconstructglyph. A malicious crafted pf2 font can lead to an overflow when calculating the maxglyphsize value,...
RHEL 9 : grub2 (RHSA-2023:0752)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:0752 advisory. The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular...
RIG Exploit Kit Now Infects Victims' PCs With Dridex Instead of Raccoon Stealer
The operators behind the Rig Exploit Kit have swapped the Raccoon Stealer malware for the Dridex financial trojan as part of an ongoing campaign that commenced in January 2022. The switch in modus operandi, spotted by Romanian company Bitdefender, comes in the wake of Raccoon Stealer temporarily...
Ruby On Rails Directory Traversal (CVE-2016-0752)
A directory traversal vulnerability exists in Ruby on Rails. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...
CVE-2022-0752
creationtimestamp| type| source ---|---|--- 2022-03-04 14:26:50+00:00| seen| https://t.me/cibsecurity/38407...
CVE-2022-0752
The CVE-2022-0752 entry describes a Cross-site Scripting (XSS) vulnerability in hestiacp/hestiacp related to improper handling of user input. Affected software is hestiacp/hestiacp prior to version 1.5.9 (with some sources noting impact up to 1.5.10). Root cause: failure to securely sanitize/esca...
CVE-2022-0752 Cross-site Scripting (XSS) - Generic in hestiacp/hestiacp
Cross-site Scripting XSS - Generic in GitHub repository hestiacp/hestiacp prior to 1.5.9...
SUSE: Security Advisory (SUSE-SU-2018:0752-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2016:1146-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Exploit for Type Confusion in Microsoft
https://www.thezdi.com/blog/2019/5/21/rce-without-native-code-ex...
Exploit for Type Confusion in Microsoft
https://www.thezdi.com/blog/2019/5/21/rce-without-native-code-ex...
Exploit for Type Confusion in Microsoft
https://www.thezdi.com/blog/2019/5/21/rce-without-native-code-ex...
Microsoft Windows Multiple Vulnerabilities (KB4537764)
This host is missing a critical security update according to Microsoft KB4537764 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...