Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 94 to the stable channel for Windows, Mac and Linux.Chrome 94 is also promoted to our new extended stable channel for Windows and Mac. This will roll out over the coming days/weeks. Chrome 94.0.4606.54 contains a number of fixes and...

Security Bulletin: IBM Ingelligent Operations Center is Vulnerable to Stored Cross-Site Scripting (CVE-2020-4318)

Summary IBM Ingelligent Operations Center is Vulnerable to Stored Cross-Site Scripting Vulnerability Details CVEID: CVE-2020-4318 DESCRIPTION: IBM Intelligent Operations Center for Emergency Management, Intelligent Operations Center IOC is vulnerable to cross-site scripting. This vulnerability...

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-4318-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4318-1 advisory. Al Viro discovered that the vfs layer in the Linux kernel contained a use- after-free vulnerability. A local attacker could use this to cause...

Dovecot 2.0.x < 2.0.16 Man In The Middle Vulnerability

Dovecot is prone to a man-in-the-middle vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you ca...

CVE-2013-4318

creationtimestamp| type| source ---|---|--- 2019-12-27 00:55:09+00:00| seen| https://t.me/cibsecurity/8861 2020-01-02 18:49:08+00:00| seen| https://t.me/cibsecurity/8944 2024-03-17 10:46:50+00:00| seen| https://t.me/ctinow/209860...

CVE-2013-4318

CVE-2013-4318 affects the Ruby Gems Features package (Ruby Features 0.3.0). The issue is a file handling flaw where input submitted to /tmp/out.html is not properly validated, enabling a local cross-site scripting (XSS) attack. Some sources describe the risk as a local XSS, while others reference...

CVE-2018-4318

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

CVE-2018-4318

CVE-2018-4318 is a memory‑safety issue described as a use-after-free that was addressed with improved memory management. Affected products include iOS 12 and later, tvOS 12, Safari 12, iTunes 12.9 for Windows, and iCloud for Windows 7.7. Apple security notes indicate patches/releases exist for th...

openSUSE: Security Advisory for webkit2gtk3 (openSUSE-SU-2019:0081-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : webkit2gtk3 (openSUSE-2019-68)

This update for webkit2gtk3 to version 2.22.4 fixes the following issues : Security issues fixed : CVE-2018-4191, CVE-2018-4197, CVE-2018-4299, CVE-2018-4306, CVE-2018-4309, CVE-2018-4392, CVE-2018-4312, CVE-2018-4314, CVE-2018-4315, CVE-2018-4316, CVE-2018-4317, CVE-2018-4318, CVE-2018-4319,...

SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2019:0059-1)

This update for webkit2gtk3 to version 2.22.4 fixes the following issues : Security issues fixed : CVE-2018-4191, CVE-2018-4197, CVE-2018-4299, CVE-2018-4306, CVE-2018-4309, CVE-2018-4392, CVE-2018-4312, CVE-2018-4314, CVE-2018-4315, CVE-2018-4316, CVE-2018-4317, CVE-2018-4318, CVE-2018-4319,...

GLSA-201812-04 : WebkitGTK+: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201812-04 WebkitGTK+: Multiple vulnerabilities Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the referenced CVE identifiers for details. Impact : A remote attacker could execute arbitrary commands or...

Debian DSA-4318-1 : moin - security update

Nitin Venkatesh discovered a cross-site scripting vulnerability in moin, a Python clone of WikiWiki. A remote attacker can conduct cross-site scripting attacks via the GUI editor's link dialogue. This only affects installations which have set up fckeditor not enabled by default. C Tenable Network...

WebKit WebCore::SVGTextLayoutAttributes::context Use-After-Free

WebKit: Use-after-free in WebCore::SVGTextLayoutAttributes::context CVE-2018-4318 There is a use-after-free security vulnerability in WebKit. The vulnerability was confirmed on the ASan build of the latest WebKit source on OSX. PoC: ================================================================...

CVE-2017-4318

...

CVE-2017-4318

CVE-2017-4318 entry is rejected/not used per initial description.

Atlassian JIRA Multiple Vulnerabilities

Atlassian JIRA is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:atlassian:jira"; if...

CVE-2016-4318

Summary: CVE-2016-4318 is an XSS vulnerability in Atlassian Jira Server prior to 7.1.9, triggered via the role name in /project/ViewDefaultProjectRoleActors.jspa. The issue arises from improper handling/validation of user-supplied input, enabling an attacker to inject HTML/JavaScript that could a...

CVE-2015-4318

creationtimestamp| type| source ---|---|--- 2015-08-21 13:00:41+00:00| seen| MISP/55d720e0-f5c8-4290-ba7f-289f0a00020f...

CVE-2015-4318

CVE-2015-4318 affects Cisco TelePresence Video Communication Server Expressway (X8.5.2). The root cause is improper handling of malformed GET requests, allowing an unauthenticated, remote attacker to cause a denial of service, potentially affecting availability. Multiple sources (NVD entry and Ci...