UBUNTU-CVE-2022-32792

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-32792

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code execution...

Design/Logic Flaw

Inappropriate implementation in Web Contents in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

SUSE SLES12 Security Update : webkit2gtk3 (SUSE-SU-2022:2522-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2522-1 advisory. - A cookie management issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina,...

SUSE-SU-2022:2524-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.36.4 bsc1201221: - CVE-2022-22662: Processing maliciously crafted web content may disclose sensitive user information. - CVE-2022-22677: The video in a webRTC call may be interrupted if the audio capture gets interrupted....

SUSE-SU-2022:2523-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: Update to version 2.36.4 bsc1201221: - CVE-2022-22662: Processing maliciously crafted web content may disclose sensitive user information. - CVE-2022-22677: The video in a webRTC call may be interrupted if the audio capture gets interrupted....

PT-2022-21534 · Apple · Macos Monterey +2

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 15.6 macOS Monterey versions prior to 12.5 Description: A memory corruption issue was addressed with improved state management. Processing maliciously crafted web content may lead to arbitrary code execution...

PT-2022-6847

Name of the Vulnerable Software and Affected Versions Apple iPadOS versions prior to 15.6 Apple tvOS versions prior to 15.6 Apple iOS versions prior to 15.6 Apple watchOS versions prior to 8.7 Apple macOS Monterey versions prior to 12.5 Apple Safari versions prior to 15.6 webkit2gtk affected...

USN-5522-1: WebKitGTK vulnerabilities

Several security issues were discovered in WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and...

CVE-2022-22662

A vulnerability was found in WebKitGTK, where an issue occurs due to improper cookie management. This flaw allows a remote attacker to trick the victim into parsing maliciously crafted web content, triggering the vulnerability and gaining access to potentially sensitive information...

PT-2022-21471 · Apple +6 · Macos Monterey +12

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.6 iPadOS versions prior to 15.6 watchOS versions prior to 8.7 tvOS versions prior to 15.6 macOS Monterey versions prior to 12.5 Safari versions prior to 15.6 Description: An out-of-bounds write issue was addressed wit...

Pimcore SQL Injection Vulnerability (CNVD-2022-62178)

Pimcore is Austria Pimcore company's set of open source for creating and managing Web applications Web content management platform. The platform integrates Web content management, e-commerce framework and product information management applications. A SQL injection vulnerability exists in Pimcore...

MAL-2022-292 Malicious code in @goatapp/web-content-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e84e5e811d3fa4518a09e29f874e3c06261de0493410085336d5e0a717e078fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @goatapp/web-content-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e84e5e811d3fa4518a09e29f874e3c06261de0493410085336d5e0a717e078fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-31050

TYPO3 is an open source web content management system. Prior to versions 9.5.34 ELTS, 10.4.29, and 11.5.11, Admin Tool sessions initiated via the TYPO3 backend user interface had not been revoked even if the corresponding user account was degraded to lower permissions or disabled completely. This...

CVE-2022-31049

TYPO3 is an open source web content management system. Prior to versions 9.5.34 ELTS, 10.4.29, and 11.5.11, user submitted content was used without being properly encoded in HTML emails sent to users. The actually affected components were mail clients used to view those messages. TYPO3 versions...

CVE-2022-31046

TYPO3 is an open source web content management system. Prior to versions 7.6.57 ELTS, 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, and 11.5.11, the export functionality fails to limit the result set to allowed columns of a particular database table. This way, authenticated users can export internal details...

Design/Logic Flaw

TYPO3 is an open source web content management system. Prior to versions 9.5.34 ELTS, 10.4.29, and 11.5.11, Admin Tool sessions initiated via the TYPO3 backend user interface had not been revoked even if the corresponding user account was degraded to lower permissions or disabled completely. This...

Cross site scripting

TYPO3 is an open source web content management system. Prior to versions 8.7.47 ELTS, 9.5.34 ELTS, 10.4.29, and 11.5.11, the Form Designer backend module of the Form Framework is vulnerable to cross-site scripting. A valid backend user account with access to the form module is needed to exploit...

CVE-2022-31050

TYPO3 Admin Tool sessions could remain valid after a user account was degraded or disabled, enabling prolonged access in the admin interface prior to the fixes. The vulnerability affects TYPO3 CMS and was addressed by updates in 9.5.34 ELTS, 10.4.29, and 11.5.11, per CVE-2022-31050 disclosures. T...