Lucene search
+L

691 matches found

OSV
OSV
•added 2024/05/14 3:13 p.m.•6 views

DEBIAN-CVE-2024-27834

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication...

5.5CVSS7.2AI score0.00598EPSS
SaveExploits0References1
OSV
OSV
•added 2024/05/14 3:13 p.m.•46 views

CVE-2024-27834

The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, tvOS 17.5, Safari 17.5, watchOS 10.5, macOS Sonoma 14.5. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication...

5.5CVSS5.2AI score
SaveExploits0References17
OSV
OSV
•added 2024/05/14 3:13 p.m.•33 views

UBUNTU-CVE-2024-27834

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication...

8.1CVSS7AI score0.00598EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/05/14 12:00 a.m.•11 views

Dotmesh 安全漏洞

Dotmesh is a git-like CLI open-sourced by Dotscience for capturing, organizing and sharing application state. A security vulnerability exists in Dotmesh 0.8.1 and earlier versions, which stems from the insecure handling of symbolic links in the unpacking routine, and could allow an attacker to re...

8.1CVSS7.8AI score0.00441EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2024/05/13 11:00 p.m.•33 views

CVE-2024-27834

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication...

8.1CVSS7AI score0.00598EPSS
SaveExploits0
Cvelist
Cvelist
•added 2024/05/13 11:00 p.m.•48 views

CVE-2024-27834

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication...

4.7AI score0.00598EPSS
SaveExploits0References6
CVE
CVE
•added 2024/05/13 11:00 p.m.•214 views

CVE-2024-27834

The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, watchOS 10.5. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication...

8.1CVSS7AI score0.00598EPSS
SaveExploits0References23Affected Software6
NVD
NVD
•added 2024/05/06 8:15 p.m.•25 views

CVE-2024-33118

LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary read vulnerability via the fileDownload method in class com.luckyframe.project.common.CommonController...

7.5CVSS7.1AI score0.00249EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/06 12:00 a.m.•15 views

LuckyFrameWeb 安全漏洞

LuckyFrameWeb is an open source testing platform open-sourced by LuckyFrameWeb. A security vulnerability exists in LuckyFrameWeb version v3.5.2, which was discovered to contain an arbitrary read vulnerability via the fileDownload method in the com.luckyframe.project.common.CommonController class...

7.5CVSS7.2AI score0.00249EPSS
SaveExploits0References2
CVE
CVE
•added 2024/05/06 12:00 a.m.•80 views

CVE-2024-33118

LuckyFrameWeb version v3.5.2 contains an arbitrary read vulnerability located in the fileDownload method within the com.luckyframe.project.common.CommonController class. This flaw allows for unauthorized reading of data. As a temporary workaround, it is recommended to disable the fileDownload met...

7.5CVSS7.3AI score0.00249EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/05/06 12:00 a.m.•30 views

CVE-2024-33118

LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary read vulnerability via the fileDownload method in class com.luckyframe.project.common.CommonController...

7.2AI score0.00249EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/06 12:00 a.m.•1 views

CVE-2024-33118: Download of Code Without Integrity Check

LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary read vulnerability via the fileDownload method in class com.luckyframe.project.common.CommonController...

7.5CVSS5.9AI score0.00249EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/06 12:00 a.m.•13 views

PT-2024-25120 · Unknown · Luckyframeweb

Name of the Vulnerable Software and Affected Versions: LuckyFrameWeb version 3.5.2 Description: The issue is related to an arbitrary read vulnerability. It affects the fileDownload method in the class com.luckyframe.project.common.CommonController. Recommendations: For LuckyFrameWeb version 3.5.2...

7.5CVSS6.5AI score0.00249EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2024/05/06 12:00 a.m.•20 views

CVE-2024-33118

LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary read vulnerability via the fileDownload method in class com.luckyframe.project.common.CommonController...

7.4AI score0.00249EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/04/12 12:00 a.m.•27 views

FreeBSD : electron{27,28} -- Out of bounds memory access in V8 (31617e47-7eec-4c60-9fdf-8aee61622bab)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 31617e47-7eec-4c60-9fdf-8aee61622bab advisory. - Out of bounds memory access in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker ...

8.8CVSS8.8AI score0.01613EPSS
SaveExploits0References3
NVD
NVD
•added 2024/04/06 3:15 p.m.•23 views

CVE-2024-3159

Out of bounds memory access in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.2AI score0.01613EPSS
SaveExploits0References4
OSV
OSV
•added 2024/04/06 3:15 p.m.•7 views

DEBIAN-CVE-2024-3159

Out of bounds memory access in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.7AI score0.01613EPSS
SaveExploits0References1
OSV
OSV
•added 2024/04/06 3:15 p.m.•41 views

CVE-2024-3159

Out of bounds memory access in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...

8.8CVSS5.5AI score
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2024/04/06 3:15 p.m.•26 views

CVE-2024-3159

Out of bounds memory access in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...

8.8CVSS7.2AI score0.01613EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/06 2:53 p.m.•27 views

CVE-2024-3159

Out of bounds memory access in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...

8.5AI score0.01613EPSS
SaveExploits0References3
Rows per page
Query Builder