Lucene search
+L

10752 matches found

Apple
Apple
•added 2024/10/28 12:00 a.m.•232 views

About the security content of watchOS11.1

About the security content of watchOS11.1 This document describes the security content of watchOS 11.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

8.4CVSS6.7AI score0.00985EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/10/28 12:00 a.m.•6 views

PT-2024-31126

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 18.1 Apple iOS versions prior to 17.7.1 Apple iPadOS versions prior to 18.1 Apple iPadOS versions prior to 17.7.1 Apple tvOS versions prior to 18.1 Apple macOS Ventura versions prior to 13.7.1 Apple macOS Sonoma...

5.5CVSS5.8AI score0.00514EPSS
SaveExploits0References18
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/10/24 11:45 p.m.•7 views

Malicious code in acl-icon-font (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4489b16998820b6266bd347e1334303e6127e834aae4103899a3aeb7cbbc9887 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/10/16 12:35 p.m.•6 views

Malicious code in bnppf-font-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a5f2ac07d2b638b2c5e858c36b6c48bcecc7c2bc4c51b99f419f06c2cd5c7c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
osv_mal
osv_mal
•added 2024/10/16 12:35 p.m.•9 views

MAL-2024-9523 Malicious code in bnppf-font-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a5f2ac07d2b638b2c5e858c36b6c48bcecc7c2bc4c51b99f419f06c2cd5c7c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7.2AI score
SaveExploits0References3
osv_oesa
osv_oesa
•added 2024/10/12 11:07 a.m.•19 views

OESA-2024-2244 poppler security update

Poppler is a free software utility library for rendering Portable Document Format PDF documents. \ Its development is supported by freedesktop.org. It is commonly used on Linux systems,and is used by \ the PDF viewers of the open source GNOME and KDE desktop environments. Security Fixes:...

2.9CVSS7.2AI score0.0018EPSS
SaveExploits0References2
osv_oesa
osv_oesa
•added 2024/10/12 11:07 a.m.•18 views

OESA-2024-2236 xterm security update

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals. Security Fixes: xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the...

9.8CVSS7.7AI score0.05449EPSS
SaveExploits1References2
osv_oesa
osv_oesa
•added 2024/10/12 11:07 a.m.•20 views

OESA-2024-2237 xterm security update

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals. Security Fixes: xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the...

9.8CVSS7.7AI score0.05449EPSS
SaveExploits1References2
osv_oesa
osv_oesa
•added 2024/10/12 11:07 a.m.•18 views

OESA-2024-2238 xterm security update

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals. Security Fixes: xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the...

9.8CVSS7.7AI score0.05449EPSS
SaveExploits1References2
osv_oesa
osv_oesa
•added 2024/10/12 11:07 a.m.•18 views

OESA-2024-2239 xterm security update

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals. Security Fixes: xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the...

9.8CVSS7.7AI score0.05449EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/10/11 12:00 a.m.•3 views

PT-2024-33908

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A kernel-infoleak issue has been identified in the Linux kernel, specifically in the con font get function. The font.data may not initialize all memory spaces, depending on the...

7.8CVSS5.7AI score0.00606EPSS
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2024/10/02 3:29 p.m.•11 views

ghostscript:gs_device_ps2write_fuzzer: Crash in chunk_free_object

Detailed Report: https://oss-fuzz.com/testcase?key=5174599181991936 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdeviceps2writefuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000045e066 Crash State: chunkfreeobject...

5.9AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2024/09/30 2:12 a.m.•5 views

Malware in font-lato-2-subset

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_oesa
osv_oesa
•added 2024/09/27 11:07 a.m.•6 views

OESA-2024-2210 poppler security update

Poppler is a free software utility library for rendering Portable Document Format PDF documents. \ Its development is supported by freedesktop.org. It is commonly used on Linux systems,and is used by \ the PDF viewers of the open source GNOME and KDE desktop environments. Security Fixes:...

2.9CVSS7.2AI score0.0018EPSS
SaveExploits0References2
osv_oesa
osv_oesa
•added 2024/09/27 11:07 a.m.•12 views

OESA-2024-2211 poppler security update

Poppler is a free software utility library for rendering Portable Document Format PDF documents. \ Its development is supported by freedesktop.org. It is commonly used on Linux systems,and is used by \ the PDF viewers of the open source GNOME and KDE desktop environments. Security Fixes:...

2.9CVSS7.2AI score0.0018EPSS
SaveExploits0References2
osv_oesa
osv_oesa
•added 2024/09/27 11:07 a.m.•11 views

OESA-2024-2212 poppler security update

Poppler is a free software utility library for rendering Portable Document Format PDF documents. \ Its development is supported by freedesktop.org. It is commonly used on Linux systems,and is used by \ the PDF viewers of the open source GNOME and KDE desktop environments. Security Fixes:...

2.9CVSS7.2AI score0.0018EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/09/27 4:03 a.m.•13 views

Malicious code in font-lato-2-subset (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b613318a5c7aecc4baa2401877fcc8216636e03d2487ca00748977bca9763ae8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2024/09/27 4:03 a.m.•11 views

MAL-2024-8992 Malicious code in font-lato-2-subset (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b613318a5c7aecc4baa2401877fcc8216636e03d2487ca00748977bca9763ae8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7.2AI score
SaveExploits0References1
osv_cve
osv_cve
•added 2024/09/25 6:15 p.m.•16 views

CVE-2024-47305

Cross-Site Request Forgery CSRF vulnerability in Dnesscarkey Use Any Font allows Cross Site Request Forgery.This issue affects Use Any Font: from n/a through 6.3.08...

8.8CVSS5.8AI score0.00208EPSS
SaveExploits0References1
NVD
NVD
•added 2024/09/25 6:15 p.m.•36 views

CVE-2024-47305

Cross-Site Request Forgery CSRF vulnerability in Dnesscarkey Use Any Font use-any-font allows Cross Site Request Forgery.This issue affects Use Any Font: from n/a through = 6.3.08...

8.8CVSS0.00208EPSS
SaveExploits0References1
Rows per page
Query Builder