44 matches found
CVE-2019-8664
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, watchOS 5.2.1. Processing a maliciously crafted message may lead to a denial of service...
CVE-2019-8664
CVE-2019-8664 corresponds to an input validation vulnerability in Apple's iMessage/Messages framework that could allow a remote attacker to cause a denial of service by forwarding or sending a malicious message. Apple fixed this in iOS 12.3 and watchOS 5.2.1; the vulnerability is described as a m...
About the security content of watchOS 5.2.1 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
Photon OS 1.0: Envoy PHSA-2020-1.0-0290
An update of the envoy package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0290. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136105...
Photon OS 2.0: Envoy PHSA-2020-2.0-0229
An update of the envoy package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0229. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid135867...
Moderate: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.9 servicemesh-proxy security update
Red Hat OpenShift Service Mesh 1.0.9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...
CVE-2020-8664
CNCF Envoy through 1.13.0 has incorrect Access Control when using SDS with Combined Validation Context. Using the same secret e.g. trusted CA across many resources together with the combined validation context could lead to the “static” part of the validation context to be not applied, even thoug...
CVE-2020-8664
CNCF Envoy through 1.13.0 has incorrect Access Control when using SDS with Combined Validation Context. Using the same secret e.g. trusted CA across many resources together with the combined validation context could lead to the “static” part of the validation context to be not applied, even thoug...
CVE-2020-8664
CVE-2020-8664 is reported in the Red Hat OpenShift Service Mesh 1.0.9 servicemesh-proxy advisory (RHSA-2020:0734). The issue is an incorrect Access Control when using SDS with a Combined Validation Context in Envoy, which could affect access controls across multiple resources and is one of severa...
skillset-online.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1096895 Security Researcher geeknik Helped patch 8664 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting skillset-online.com websit...
clean-future.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1085121 Security Researcher geeknik Helped patch 8664 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting clean-future.ru website an...
Apple Patches iMessage Bug That Bricks iPhones with Out-of-Date Software
Apple patched a high-severity iMessage bug found by Google Project Zero that can be exploited by an attacker who sends a specially-crafted message to a vulnerable iOS device. Those iPhones receiving the malicious message are rendered inoperable, or bricked. Apple patched the bug with the release ...
About the security content of watchOS 5.2.1
About the security content of watchOS 5.2.1 This document describes the security content of watchOS 5.2.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
CVE-2017-8664
CVE-2017-8664 affects Windows Hyper-V remote code execution when input from a privileged user on a guest OS is not properly validated. Connected sources (e.g., CNVD-2017-28010 and OpenVAS/Nessus listings) corroborate Hyper-V input-validation as the root cause and remote-code-execution impact, but...
CVE-2016-8664
CVE-2016-8664 is rejected and does not represent an active vulnerability entry.
Ubuntu: Security Advisory (USN-2860-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 14.04 LTS : Oxide vulnerabilities (USN-2860-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2860-1 advisory. A race condition was discovered in the MutationObserver implementation in Blink. If a user were tricked in to opening a specially crafted website, an...
Google Chrome Multiple Vulnerabilities (Jan 2016) - Windows
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
CVE-2015-8664
CVE-2015-8664: Integer overflow in Chrome’s WebCursor::Deserialize (content/common/cursors/webcursor.cc) before 47.0.2526.106 allows remote DoS or unspecified impact via a crafted RGBA pixel array. It is a different vulnerability from CVE-2015-6792; no additional exploit details are provided in t...