Lucene search
+L

56 matches found

OSV
OSV
added 2020/10/16 5:15 p.m.10 views

CVE-2020-9983

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to code execution...

8.8CVSS8.3AI score
SaveExploits0References15
CVE
CVE
added 2020/10/16 4:56 p.m.349 views

CVE-2020-9983

CVE-2020-9983 is a WebKit-related out-of-bounds write vulnerability addressed by multiple vendors. Apple security entries show CVE-2020-9983 as part of the WebKit set fixed in iOS/tvOS/watchOS/macOS updates, with impact noted as arbitrary code execution when processing malicious web content. Fedo...

8.8CVSS7.8AI score0.02083EPSS
SaveExploits0References15Affected Software7
Debian CVE
Debian CVE
added 2020/10/16 4:56 p.m.41 views

CVE-2020-9983

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to code execution...

8.8CVSS7.8AI score0.02083EPSS
SaveExploits0
Apple
Apple
added 2020/09/16 12:0 a.m.193 views

About the security content of iTunes 12.10.9 for Windows

About the security content of iTunes 12.10.9 for Windows This document describes the security content of iTunes 12.10.9 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

9.3CVSS9.3AI score0.08491EPSS
SaveExploits2References1Affected Software1
Kaspersky
Kaspersky
added 2020/09/16 12:0 a.m.76 views

KLA12007 Multiple vulnerabilities in Apple iTunes

Multiple vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An out-of-bounds write vulnerability in ImageIO can be exploited...

9.3CVSS9.8AI score0.08491EPSS
SaveExploits2References3
Apple
Apple
added 2020/09/16 12:0 a.m.363 views

About the security content of Safari 14.0

About the security content of Safari 14.0 This document describes the security content of Safari 14.0. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

8.8CVSS8.3AI score0.02333EPSS
SaveExploits0References1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/02/05 12:53 a.m.18 views

Security Bulletin: Multiple access control vulnerabilities affect IBM Sterling B2B Integrator (CVE-2016-9983, CVE-2016-9982)

Summary IBM Sterling B2B Integrator Standard Edition could allow an authenticate user with special privileges to view files and web pages that they should not have access to. Vulnerability Details CVEID: CVE-2016-9983 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow an...

6.5CVSS1.7AI score0.01206EPSS
SaveExploits0Affected Software1
CVE
CVE
added 2018/05/17 3:0 p.m.55 views

CVE-2018-9983

Foxit Reader 9.0.0.29935 is affected by an out-of-bounds read in the U3D parsing path. The issue stems from insufficient validation of user-supplied data, leading to potential disclosure of sensitive information. Exploitation requires user interaction (visiting a malicious page or opening a malic...

6.5CVSS6.5AI score0.02504EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2017/06/22 6:29 p.m.4 views

CVE-2016-9983

IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user with special privileges to view files that they should not have access to. IBM X-Force ID: 120275...

5.3CVSS5.8AI score0.0114EPSS
SaveExploits0References3
CVE
CVE
added 2017/06/22 6:0 p.m.50 views

CVE-2016-9983

Summary: CVE-2016-9983 affects IBM Sterling B2B Integrator Standard Edition 5.2. An authenticated user with special privileges could view files they should not have access to, indicating an access-control weakness leading to information disclosure. The IBM bulletin for this CVE groups it with CVE...

5.3CVSS5.2AI score0.0114EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2017/06/04 11:29 p.m.6 views

CVE-2014-9983

Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive. This allows remote attackers to write to arbitrary files via a crafted archive...

5.5CVSS7AI score
SaveExploits0References2
NVD
NVD
added 2017/06/04 11:29 p.m.12 views

CVE-2014-9983

Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive. This allows remote attackers to write to arbitrary files via a crafted archive...

5.5CVSS5.5AI score0.01768EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2017/06/04 11:29 p.m.21 views

CVE-2014-9983

Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive. This allows remote attackers to write to arbitrary files via a crafted archive...

5.5CVSS6.2AI score0.01768EPSS
SaveExploits1References2
CVE
CVE
added 2017/06/04 2:0 p.m.63 views

CVE-2014-9983

CVE-2014-9983 describes a directory traversal vulnerability in RAR 4.x and 5.x. An unpack operation following any symlink (including symlinks inside the archive) can allow a remote attacker to write to arbitrary files via a crafted archive. The vulnerability is documented across multiple feeds (N...

5.5CVSS5.5AI score0.01768EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2017/06/04 2:0 p.m.23 views

CVE-2014-9983

Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive. This allows remote attackers to write to arbitrary files via a crafted archive...

5.5AI score0.01768EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2017/06/04 2:0 p.m.20 views

CVE-2014-9983

Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive. This allows remote attackers to write to arbitrary files via a crafted archive...

5.5CVSS5.5AI score0.01768EPSS
SaveExploits1
Rows per page
Query Builder