UBUNTU-CVE-2022-22590

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing maliciously crafted web content may lead to arbitrary code execution...

Amazon Linux 2 : webkitgtk4 (ALAS-2022-1747)

The version of webkitgtk4 installed on the remote host is prior to 2.28.2-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1747 advisory. A flaw was found in webkitgtk. This flaw could allow an attacker to use maliciously crafted web content leading to arbitrary co...

The vulnerability of the Linux operating system’s RDMA core in connection management allows a hacker to execute arbitrary code.

The vulnerability of the Linux operating system’s RDMA kernel for network managers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

About the security content of Safari 15.3

About the security content of Safari 15.3 This document describes the security content of Safari 15.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Rocky Linux 8 : webkit2gtk3 (RLSA-2021:4097)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4097 advisory. - A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing malicious...

Rocky Linux 8 : GNOME (RLSA-2021:4381)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:4381 advisory. - A use-after-free vulnerability exists in the way certain events are processed for ImageLoader objects of Webkit WebKitGTK 2.30.4. A specially crafted...

Rocky Linux 8 : GNOME (RLSA-2021:1586)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:1586 advisory. - A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS...

[SECURITY] Fedora 35 Update: lua-5.4.4-1.fc35

Lua is a powerful light-weight programming language designed for extending applications. Lua is also frequently used as a general-purpose, stand-alone language. Lua is free software. Lua combines simple procedural syntax with powerful data description constructs based on associative arrays and...

PT-2022-2054 · Siemens · Simatic S7-1500 Software Controller +7

Name of the Vulnerable Software and Affected Versions: SIMATIC Drive Controller family versions 2.9.2 through 2.9.4 SIMATIC ET 200SP Open Controller CPU 1515SP PC2 versions 21.9 through 21.9.4 SIMATIC S7-1200 CPU family versions 4.5.0 through 4.5.2 SIMATIC S7-1500 CPU family versions 2.9.2 throug...

The vulnerability in the implementation of NVGPU_IOCTL_CHANNEL_SET_ERROR_NOTIFIER for the memory management driver of the NVIDIA Shield TV Experience software allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the NVGPUIOCTLCHANNELSETERRORNOTIFIER implementation in the NVMAP graphics processor driver of the NVIDIA Shield TV Experience software device involves access control deficiencies. Exploiting this vulnerability could allow an attacker to trigger a service failure or execute...

Remote Code Execution (RCE)

webkit2gtk:edge is vulnerable to remote code execution. A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary...

Remote Code Execution (RCE)

webkit2gtk:edge is vulnerable to remote code execution. A use after free issue was addressed with improved memory management. Processing maliciously crafted web content may lead to arbitrary code execution...

Out-of-bounds Read

Overview fast-string-search is a module that can search substrings in a string by using N-API and boyer-moore-magiclen. Affected versions of this package are vulnerable to Out-of-bounds Read due to incorrect memory freeing and length calculation for any non-string input as the source. This allows...

InsydeH2O UEFI software impacted by multiple vulnerabilities in SMM

Overview The InsydeH2O Hardware-2-Operating System H2O UEFI firmware contains multiple vulnerabilities related to memory management in System Management Mode SMM. Description UEFI software provides an extensible interface between an operating system and platform firmware. UEFI software uses a...

CVE-2021-31617

In ASQ in Stormshield Network Security SNS 1.0.0 through 2.7.8, 2.8.0 through 2.16.0, 3.0.0 through 3.7.20, 3.8.0 through 3.11.8, and 4.0.1 through 4.2.2, mishandling of memory management can lead to remote code execution...

CVE-2021-31617

In ASQ in Stormshield Network Security SNS 1.0.0 through 2.7.8, 2.8.0 through 2.16.0, 3.0.0 through 3.7.20, 3.8.0 through 3.11.8, and 4.0.1 through 4.2.2, mishandling of memory management can lead to remote code execution...

Remote code execution

In ASQ in Stormshield Network Security SNS 1.0.0 through 2.7.8, 2.8.0 through 2.16.0, 3.0.0 through 3.7.20, 3.8.0 through 3.11.8, and 4.0.1 through 4.2.2, mishandling of memory management can lead to remote code execution...

CVE-2021-31617

In ASQ in Stormshield Network Security SNS 1.0.0 through 2.7.8, 2.8.0 through 2.16.0, 3.0.0 through 3.7.20, 3.8.0 through 3.11.8, and 4.0.1 through 4.2.2, mishandling of memory management can lead to remote code execution...

CVE-2021-31617

CVE-2021-31617 affects Stormshield Network Security (SNS) ASQ. In multiple versions (1.0.0–2.7.8, 2.8.0–2.16.0, 3.0.0–3.7.20, 3.8.0–3.11.8, 4.0.1–4.2.2), memory management errors in ASQ can lead to remote code execution. The vulnerability is described as a buffer/memory handling issue in ASQ with...

Apple Safari Security Update (HT213058)

Apple Safari is prone to multiple vulnerabilities according to Apple security advisory. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...