6302 matches found
gadgetsjunkies.com Cross Site Scripting vulnerability OBB-3517834
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
extension.info Cross Site Scripting vulnerability OBB-3517793
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Layui č·Øē«čę¬ę¼ę“
Layui is Layui open source Web UI component library that follows the original development model . A cross-site scripting vulnerability exists in versions prior to layui v2.8.0-rc.16. The vulnerability stems from an unknown part of the component HTML Attribute Handler, which leads to cross-site...
CVE-2023-38065
creationtimestamp| type| source ---|---|--- 2023-07-12 16:15:35+00:00| seen| https://t.me/cibsecurity/66537...
CentOS 8 : nodejs:16 (CESA-2023:4034)
The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2023:4034 advisory. - c-ares is an asynchronous resolver library. When cross-compiling c-ares and using the autotools build system, CARESRANDOMFILE will not be set, as see...
AlmaLinux 8 : nodejs:16 (ALSA-2023:4034)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:4034 advisory. c-ares: 0-byte UDP payload Denial of Service CVE-2023-32067 c-ares: Buffer Underwrite in aresinetnetpton CVE-2023-31130 c-ares: Insufficient randomness in...
CVE-2023-1695
creationtimestamp| type| source ---|---|--- 2023-07-06 16:26:08+00:00| seen| https://t.me/cibsecurity/66082...
CVE-2023-37304
creationtimestamp| type| source ---|---|--- 2023-06-30 20:15:16+00:00| seen| https://t.me/cibsecurity/65802...
CVE-2023-36617
creationtimestamp| type| source ---|---|--- 2023-06-29 16:14:15+00:00| seen| https://t.me/cibsecurity/65714 2023-08-16 15:18:03+00:00| seen| https://t.me/ctinow/130896 2024-08-15 17:00:25+00:00| seen| https://t.me/criticalbug/1427 2025-09-16 14:53:13+00:00| seen|...
CVE-2022-46715
A logic issue was addressed with improved checks. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to bypass certain Privacy preferences...
CVE-2022-42792
This issue was addressed with improved data protection. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to read sensitive location information...
Design/Logic Flaw
A logic issue was addressed with improved checks. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to bypass certain Privacy preferences...
Information disclosure
This issue was addressed with improved data protection. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to read sensitive location information...
CVE-2022-42792
This issue was addressed with improved data protection. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to read sensitive location information...
CVE-2022-42792
This issue was addressed with improved data protection. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to read sensitive location information...
CVE-2022-46715
CVE-2022-46715 is a logic issue in Apple iOS/iPadOS where an app may bypass certain Privacy preferences. Connected Apple security content specifies the issue exists in iOS prior to 16.1 and iPadOS prior to 16, with a fix in iOS 16.1 and iPadOS 16. The root cause is described as a logic issue addr...
CVE-2022-46715
A logic issue was addressed with improved checks. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to bypass certain Privacy preferences...
CVE-2022-42792
CVE-2022-42792 affects iOS/iPadOS where an app may read sensitive location information due to inadequate data protection. Multiple connected sources confirm the issue and outcomes: Appleās security content states the fix is in iOS 16.1 and iPadOS 16; Red Hat/PRION and NVD entries mirror this, not...
CVE-2022-46715
A logic issue was addressed with improved checks. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to bypass certain Privacy preferences...
Node.js 16.x < 16.20.1, 18.x < 18.16.1, 20.x < 20.3.1 Multiple Vulnerabilities - Windows
Node.js is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nodejs:node.js"; ifdescription...