About the security content of iOS 16.1 and iPadOS 16

About the security content of iOS 16.1 and iPadOS 16 This document describes the security content of iOS 16.1 and iPadOS 16. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

PT-2022-26600 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: Apple tvOS versions prior to 16.1 Apple iOS versions prior to 16.1 Apple iPadOS versions prior to 16 Apple macOS versions prior to Ventura 13 Apple watchOS versions prior to 9.1 Description: An access issue was addressed with additional sandb...

PT-2022-26596 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: Apple tvOS versions prior to 16.1 Apple iOS versions prior to 16.1 Apple iPadOS versions prior to 16 Apple macOS versions prior to Ventura 13 Apple watchOS versions prior to 9.1 Description: An out-of-bounds write issue was addressed with...

Oracle Linux 8 : nodejs:16 (ELSA-2022-6964)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-6964 advisory. - Resolves: CVE-2022-35255 CVE-2022-35256 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

CVE-2022-3542

creationtimestamp| type| source ---|---|--- 2022-10-17 16:13:24+00:00| seen| https://t.me/cibsecurity/51576...

RHEL 8 : nodejs:16 (RHSA-2022:6964)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6964 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...

CVE-2022-3529

creationtimestamp| type| source ---|---|--- 2022-10-16 22:42:17+00:00| seen| https://t.me/cibsecurity/51537...

CVE-2022-3530

creationtimestamp| type| source ---|---|--- 2022-10-16 22:42:14+00:00| seen| https://t.me/cibsecurity/51534...

schoonrewoerd.lekkermakkelijk.nl Cross Site Scripting vulnerability OBB-3000718

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

pusatmesintetas.com Cross Site Scripting vulnerability OBB-3000412

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-3521

creationtimestamp| type| source ---|---|--- 2022-10-16 14:30:44+00:00| seen| https://t.me/cibsecurity/51531...

CVE-2022-42969

creationtimestamp| type| source ---|---|--- 2022-10-16 12:30:35+00:00| seen| https://t.me/cibsecurity/51527...

CVE-2022-42968

creationtimestamp| type| source ---|---|--- 2022-10-16 07:30:24+00:00| seen| https://t.me/cibsecurity/51526...

everywomanwellness.com Cross Site Scripting vulnerability OBB-2999021

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

dsmacku.com Cross Site Scripting vulnerability OBB-2998801

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-41598

creationtimestamp| type| source ---|---|--- 2022-10-14 20:35:13+00:00| seen| https://t.me/cibsecurity/51472 2025-05-14 16:33:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16331...

OSV-2022-1042 Heap-buffer-overflow in AffixMgr::compound_check

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52317 Crash type: Heap-buffer-overflow READ 16 Crash state: AffixMgr::compoundcheck SuggestMgr::checkword SuggestMgr::testsug...

AdGuardHome vulnerable to Cross-Site Request Forgery

In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery CSRF, in the custom filtering rules functionality. An attacker can persuade an authorized user to follow a malicious link, resulting in deleting/modifying the custom filtering rules. The file that...

Huawei EulerOS: Security Advisory for libjpeg-turbo (EulerOS-SA-2022-2430)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : libjpeg-turbo (EulerOS-SA-2022-2467)

According to the versions of the libjpeg-turbo packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer...