13097 matches found
CVE-2022-3315
Type confusion in Blink in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Low...
CVE-2022-32923
A correctness issue in the JIT was addressed with improved checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may disclose internal states of the app...
WatchTowerHQ < 3.6.16 - Unauthenticated Arbitrary File Access
The plugin does properly check for the access token in its REST API endpoints, which could allow unauthenticated attackers to call them and download arbitrary files...
ASB-A-238106223
Bulletin has no description...
ASB-A-244673210
In jpg driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel...
ASB-A-240973083
Bulletin has no description...
ASB-A-244684957
In face detect driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in kernel...
DSA-5268-1 ffmpeg - security update
Bulletin has no description...
GHSA-PFQ8-RQ6V-VF5M vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu...
PT-2022-26776 · Rtf2Html · Rtf2Html
Name of the Vulnerable Software and Affected Versions: rtf2html version 0.2.0 Description: A heap overflow was discovered in the component /rtf2html/./rtf tools.h. Recommendations: For version 0.2.0, update to a newer version that contains a fix for this issue...
DLA-3174-1 pysha3 - security update
Bulletin has no description...
CVE-2022-43280
wasm-interp v1.0.29 was discovered to contain an out-of-bounds read via the component OnReturnCallExpr-GetReturnCallDropKeepCount...
MAL-2022-7084 Malicious code in web3-update (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77fdc33138ce74bde93c5bcbd67fafc405aeeb7ae156a91124a5500d3f1b869c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Signature Verification Bypass
perl is vulnerable to signature verification bypass. The vulnerability exists in CHECKSUMS files which allows an attacker to use this flaw to bypass signature verification...
MGASA-2022-0381 Updated perl-Image-ExifTool packages fix security vulnerability
lib/Image/ExifTool.pm in ExifTool before 12.38 mishandles a $file = /|$/ check, leading to command injection. CVE-2022-23935...
Liferay Portal and Liferay DXP Vulnerable to XSS via the Document Library Module
A Cross-site scripting XSS vulnerability in Document Library module before 6.0.98 from Liferay Portal 7.4.3.30 through 7.4.3.36, and Liferay DXP 7.4 update 30 through update 36 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter...
CVE-2022-39408 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2022-39402 vulnerabilities
Vulnerabilities for packages: mysql...