CVE-2018-4318

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

CVE-2018-4318

CVE-2018-4318 is a memory‑safety issue described as a use-after-free that was addressed with improved memory management. Affected products include iOS 12 and later, tvOS 12, Safari 12, iTunes 12.9 for Windows, and iCloud for Windows 7.7. Apple security notes indicate patches/releases exist for th...

openSUSE: Security Advisory for webkit2gtk3 (openSUSE-SU-2019:0081-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : webkit2gtk3 (openSUSE-2019-68)

This update for webkit2gtk3 to version 2.22.4 fixes the following issues : Security issues fixed : CVE-2018-4191, CVE-2018-4197, CVE-2018-4299, CVE-2018-4306, CVE-2018-4309, CVE-2018-4392, CVE-2018-4312, CVE-2018-4314, CVE-2018-4315, CVE-2018-4316, CVE-2018-4317, CVE-2018-4318, CVE-2018-4319,...

SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2019:0059-1)

This update for webkit2gtk3 to version 2.22.4 fixes the following issues : Security issues fixed : CVE-2018-4191, CVE-2018-4197, CVE-2018-4299, CVE-2018-4306, CVE-2018-4309, CVE-2018-4392, CVE-2018-4312, CVE-2018-4314, CVE-2018-4315, CVE-2018-4316, CVE-2018-4317, CVE-2018-4318, CVE-2018-4319,...

GLSA-201812-04 : WebkitGTK+: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201812-04 WebkitGTK+: Multiple vulnerabilities Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the referenced CVE identifiers for details. Impact : A remote attacker could execute arbitrary commands or...

Debian DSA-4318-1 : moin - security update

Nitin Venkatesh discovered a cross-site scripting vulnerability in moin, a Python clone of WikiWiki. A remote attacker can conduct cross-site scripting attacks via the GUI editor's link dialogue. This only affects installations which have set up fckeditor not enabled by default. C Tenable Network...

WebKit WebCore::SVGTextLayoutAttributes::context Use-After-Free

WebKit: Use-after-free in WebCore::SVGTextLayoutAttributes::context CVE-2018-4318 There is a use-after-free security vulnerability in WebKit. The vulnerability was confirmed on the ASan build of the latest WebKit source on OSX. PoC: ================================================================...

CVE-2017-4318

CVE-2017-4318 entry is rejected/not used per initial description.

CVE-2017-4318

...

Atlassian JIRA Multiple Vulnerabilities

Atlassian JIRA is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:atlassian:jira"; if...

CVE-2016-4318

Summary: CVE-2016-4318 is an XSS vulnerability in Atlassian Jira Server prior to 7.1.9, triggered via the role name in /project/ViewDefaultProjectRoleActors.jspa. The issue arises from improper handling/validation of user-supplied input, enabling an attacker to inject HTML/JavaScript that could a...

CVE-2015-4318

creationtimestamp| type| source ---|---|--- 2015-08-21 13:00:41+00:00| seen| MISP/55d720e0-f5c8-4290-ba7f-289f0a00020f...

CVE-2015-4318

CVE-2015-4318 affects Cisco TelePresence Video Communication Server Expressway (X8.5.2). The root cause is improper handling of malformed GET requests, allowing an unauthenticated, remote attacker to cause a denial of service, potentially affecting availability. Multiple sources (NVD entry and Ci...

Texas Imperial Software WFTPD 3.23 SIZE Overflow

No description provided by source. $Id: wftpdsize.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

openSUSE Security Update : dovecot20 (openSUSE-SU-2012:0219-1)

In proxy mode dovecot did not verify that the SSL certificate of the remote actually matched the server name. Dovecot was updated to version 2.0.16 which fixes the problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

CVE-2011-4318

Dovecot 2.0.x before 2.0.16 is vulnerable when ssl or starttls is enabled and hostname is used to define the proxy destination: it does not verify that the server hostname matches a domain name in the certificate’s CN, enabling MITM spoofing with a valid certificate. Affected version family: Dove...

RedHat Update for dovecot RHSA-2013:0520-02

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RHEL 6 : dovecot (RHSA-2013:0520)

Updated dovecot packages that fix three security issues and one bug are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...

Fedora Update for asterisk FEDORA-2012-4318

Check for the Version of asterisk OpenVAS Vulnerability Test Fedora Update for asterisk FEDORA-2012-4318 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...