6299 matches found
Code injection
An issue existed with the file paths used to store website data. The issue was resolved by improving how website data is stored. This issue is fixed in iOS 16. An unauthorized user may be able to access browsing history...
Input validation
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 16. An app may be able to disclose kernel memory...
CVE-2022-32833
An issue existed with the file paths used to store website data. The issue was resolved by improving how website data is stored. This issue is fixed in iOS 16. An unauthorized user may be able to access browsing history...
CVE-2022-32916
CVE-2022-32916 describes an out-of-bounds read that could disclose kernel memory on Apple iOS. Connected sources specify the issue affects iOS prior to 16 and that the fix was implemented with input validation improvements in iOS 16. The kernel memory disclosure was categorized under a memory rea...
CVE-2022-4526 django-photologue Default Template photo_detail.html cross site scripting
A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some unknown functionality of the file photologue/templates/photologue/photodetail.html of the component Default Template Handler. The manipulation of the argument object.caption...
CVE-2022-32833
An issue existed with the file paths used to store website data. The issue was resolved by improving how website data is stored. This issue is fixed in iOS 16. An unauthorized user may be able to access browsing history...
CVE-2022-32916
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 16. An app may be able to disclose kernel memory...
CVE-2022-32833
CVE-2022-32833 describes an issue with the file paths used to store website data on Apple iOS. The root cause is an insecure handling of website data paths, which could allow an unauthenticated user to access browsing history. The vulnerability is mitigated by Appleās fix in iOS 16. Connected sou...
CVE-2022-45313
creationtimestamp| type| source ---|---|--- 2022-12-05 18:40:13+00:00| seen| https://t.me/cibsecurity/53989 2022-12-07 11:01:06+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7314 2022-12-07 14:51:25+00:00| published-proof-of-concept| https://t.me/crackcodes/1666...
Asterisk Multiple Vulnerabilities (AST-2022-007, AST-2022-008, AST-2022-009)
Asterisk is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk"; if description...
Code injection
UC-8100A-ME-T System Image: Versions v1.0 to v1.6, UC-2100 System Image: Versions v1.0 to v1.12, UC-2100-W System Image: Versions v1.0 to v 1.12, UC-3100 System Image: Versions v1.0 to v1.6, UC-5100 System Image: Versions v1.0 to v1.4, UC-8100 System Image: Versions v3.0 to v3.5, UC-8100-ME-T...
AZL-11523 CVE-2022-45873 affecting package systemd for versions less than 250.3-12
systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parseelfobject in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively, and put it in a deeply nested...
CVE-2022-45873
systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parseelfobject in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively, and put it in a deeply nested...
rsync security and bug fix update
3.2.3-18 - Resolves: 2111177 - remote arbitrary files write inside the directories of connecting peers 3.2.3-17 - Resolves: 2116669 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field 3.2.3-16 - Related: 2081296 - Adding ci.fmf for...
CVE-2022-4076
creationtimestamp| type| source ---|---|--- 2022-11-20 16:36:23+00:00| seen| https://t.me/cibsecurity/53220...
chatterbate.org Cross Site Scripting vulnerability OBB-3058493
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-43288
creationtimestamp| type| source ---|---|--- 2022-11-16 07:54:58+00:00| seen| https://t.me/cibsecurity/53003...
CVE-2022-3971
creationtimestamp| type| source ---|---|--- 2022-11-16 07:54:48+00:00| seen| https://t.me/cibsecurity/52994...