SUSE CVE-2014-1703

Use-after-free vulnerability in the WebSocketDispatcherHost::SendOrDrop function in content/browser/rendererhost/websocketdispatcherhost.cc in the Web Sockets implementation in Google Chrome before 33.0.1750.149 might allow remote attackers to bypass the sandbox protection mechanism by leveraging...

SUSE CVE-2016-9625

An issue was discovered in the Tatsuya Kinoshita w3m fork before 0.5.3-33. Infinite recursion vulnerability in w3m allows remote attackers to cause a denial of service via a crafted HTML page...

SUSE CVE-2018-12096

The liblnkdatastringgetutf8stringsize function in liblnkdatastring.c in liblnk through 2018-04-19 allows remote attackers to cause an information disclosure heap-based buffer over-read via a crafted lnk file. NOTE: the vendor has disputed this as described in libyal/liblnk issue 33 on GitHub...

marksplumbinginc.com Cross Site Scripting vulnerability OBB-3193224

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-42376

creationtimestamp| type| source ---|---|--- 2023-01-26 20:33:48+00:00| seen| https://t.me/cibsecurity/56905...

GHSA-FHG7-M89Q-25R3 ReDoS Vulnerability in ua-parser-js version

Description: A regular expression denial of service ReDoS vulnerability has been discovered in ua-parser-js. Impact: This vulnerability bypass the library's MAXLENGTH input limit prevention. By crafting a very-very-long user-agent string with specific pattern, an attacker can turn the script to g...

Fedora 33 : atasm (2021-8e96009030)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-8e96009030 advisory. - ATasm 1.06 has a stack-based buffer overflow in the tocomma function in asm.c via a crafted .m65 file. CVE-2019-19785 - ATasm 1.06 has a stack-bas...

Mozilla Firefox ESR Security Advisories (MFSA2021-33, MFSA2021-35) - Windows

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

Mozilla Firefox Security Advisory (MFSA2021-33) - Windows

This host is missing a security update for Mozilla Firefox. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

CVE-2022-46424

creationtimestamp| type| source ---|---|--- 2022-12-20 22:12:33+00:00| seen| https://t.me/cibsecurity/54991...

CVE-2022-4561

creationtimestamp| type| source ---|---|--- 2022-12-16 20:24:33+00:00| seen| https://t.me/cibsecurity/54764...

CVE-2022-42311

creationtimestamp| type| source ---|---|--- 2022-11-01 15:13:51+00:00| seen| https://t.me/cibsecurity/52356 2025-05-06 15:21:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15136...

ASB-A-243924784

In getMountModeInternal of StorageManagerService.java, there is a possible prevention of package installation due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2022-41598

creationtimestamp| type| source ---|---|--- 2022-10-14 20:35:13+00:00| seen| https://t.me/cibsecurity/51472 2025-05-14 16:33:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16331...

CVE-2022-3503

creationtimestamp| type| source ---|---|--- 2022-10-14 14:33:37+00:00| seen| https://t.me/cibsecurity/51395...

CVE-2022-33325

creationtimestamp| type| source ---|---|--- 2022-10-13 15:05:03+00:00| seen| https://t.me/truesecator/3558 2022-10-13 17:22:33+00:00| seen| https://t.me/icscert/629...

Security Bulletin: IBM Sterling Connect:Direct Browser User Interface vulnerable to multiple issues due to IBM Runtime Environment Java

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Versions. Sterling Connect:Direct Browser User Interface has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-21496 DESCRIPTION: An unspecified vulnerability in Java SE related to the JNDI component...

Mozilla Firefox Security Advisory (MFSA2022-33) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Firefox Security Advisory (MFSA2022-33) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

tpcpage.com Cross Site Scripting vulnerability OBB-2855378

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...