97 matches found
CVE-2026-84611
CVE-2026-84611 is an out-of-bounds write vulnerability in Apple's 3D model processing, addressed with improved bounds checking. Processing a maliciously crafted 3D model may lead to memory corruption . The issue is fixed in iOS 26.7 / iPadOS 26.7 , iOS 27 / iPadOS 27 , macOS Golden Gate 27 , macO...
EUVD-2026-78107
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memo...
EUVD-2026-77886
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memory...
CVE-2026-84620
CVE-2026-84620 is an integer overflow in Apple's 3D model processing pipeline, remediated with improved input validation. Processing a maliciously crafted 3D model may lead to memory corruption , which in practice could allow code execution or denial of service depending on the context. The vulne...
CVE-2026-84546
CVE-2026-84546 is an out-of-bounds write flaw in Apple's operating systems, triggered by processing a maliciously crafted 3D model , which may lead to memory corruption . The issue was addressed with improved bounds checking. Fixed versions include iOS 26.7 / iPadOS 26.7 , iOS 27 / iPadOS 27 , ma...
EUVD-2026-78011
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memo...
CVE-2026-84632
CVE-2026-84632 is a memory corruption vulnerability in multiple Apple operating systems, triggered by processing a maliciously crafted 3D model . The root cause is insufficient memory handling , addressed through improved handling in the following updates: iOS 26.7 , iPadOS 26.7 , iOS 27 , iPadOS...
EUVD-2026-78095
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D model may lead to memory corruption...
CVE-2026-1985 Press3D <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via Link URL Parameter in 3D Model Block
The Press3D plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 3D Model Gutenberg block in all versions up to, and including, 1.0.2. This is due to the plugin failing to sanitize and validate the URL scheme when storing link URLs for 3D model blocks, allowing javascript:...
CVE-2026-1985
CVE-2026-1985 pertains to the WordPress Press3D plugin up to version 1.0.2, where a vulnerability in the 3D Model Gutenberg block allows Stored Cross-Site Scripting via the link URL parameter. The root cause is inadequate sanitization/validation of the URL scheme when storing model block URLs, en...
CVE-2026-1985
The Press3D plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 3D Model Gutenberg block in all versions up to, and including, 1.0.2. This is due to the plugin failing to sanitize and validate the URL scheme when storing link URLs for 3D model blocks, allowing javascript:...
WordPress plugin Press3D 跨站脚本漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
WordPress Press3D plugin <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via Link URL Parameter in 3D Model Block vulnerability
Authenticated Author+ Stored Cross-Site Scripting via Link URL Parameter in 3D Model Block vulnerability discovered by WordFence in WordPress Plugin Press3D versions = 1.0.2...
EUVD-2024-28479
Malicious code in bioql PyPI...
EUVD-2023-42078
Malicious code in bioql PyPI...
EUVD-2023-36612
Malicious code in bioql PyPI...
EUVD-2024-49132
Malicious code in bioql PyPI...
EUVD-2023-42238
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2021-44961
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory leakage flaw exists in the class PerimeterGenerator of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. Specially crafted stl files can exhaust...
