USN-4939-1: WebKitGTK vulnerabilities

A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

Command Execution Vulnerability in CmsEasy Backend

CmsEasy is a web content management system based on PHP Mysql architecture and a PHP development platform. A command execution vulnerability exists in the CmsEasy backend. An attacker can exploit the vulnerability to gain server privileges...

CmsEasy suffers from SQL injection vulnerability (CNVD-2021-35531)

CmsEasy is a web content management system based on PHP Mysql architecture and a PHP development platform. CmsEasy is vulnerable to SQL injection. An attacker can exploit the vulnerability to obtain sensitive database information...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-35880)

Extreme CMS is an open source and free CMS web content management system in PHP language. Extreme CMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive information in the database...

CmsEasy suffers from SQL injection vulnerability (CNVD-2021-35527)

CmsEasy is a web content management system based on PHP Mysql architecture and a PHP development platform. CmsEasy is vulnerable to SQL injection. An attacker can exploit the vulnerability to obtain sensitive database information...

Apple tvOS 缓冲区错误漏洞

Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple watchOS is a smart watch operating system.Apple watchOS is a smart watch operating system. A buffer error vulnerability exists in multiple...

About the security content of Safari 14.1

About the security content of Safari 14.1 This document describes the security content of Safari 14.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

VulnCheck KEV: CVE-2021-30665

Apple iOS, iPadOS, macOS, watchOS, and tvOS WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products...

About the security content of iOS 12.5.3

About the security content of iOS 12.5.3 This document describes the security content of iOS 12.5.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

VulnCheck KEV: CVE-2021-30666

Apple iOS WebKit contains a buffer-overflow vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML...

PT-2021-4452 · Apple +8 · Macos Big Sur +13

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 14.5.1 iPadOS versions prior to 14.5.1 tvOS versions prior to 14.6 iOS versions prior to 12.5.3 Safari versions prior to 14.1.1 macOS Big Sur versions prior to 11.3.1 Description: An integer overflow issue was addressed...

Extreme cms has SQL injection vulnerability

jizhicms is an open source web content management system developed by Langfang Extreme Networks Technology Co. Extreme cms SQL injection vulnerability , attackers can use the vulnerability to obtain database sensitive information...

Extreme cms suffers from SQL injection vulnerability (CNVD-2021-35729)

jizhicms is an open source web content management system developed by Langfang Extreme Networks Technology Co. Extreme cms SQL injection vulnerability , attackers can use the vulnerability to obtain database sensitive information...

Cross-site Scripting (XSS)

webkit2gtk:edge is vulnerable to cross-site scripting. An input validation issue was addressed with improved input validation. Processing maliciously crafted web content may lead to a cross site scripting attack...

Remote Code Execution (RCE)

webkit2gtk is vulnerable to remote code execution. The vulnerability exists due to a use after free issue which is processed from a crafted web content...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-34300)

Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

About the security content of iCloud for Windows 12.3

About the security content of iCloud for Windows 12.3 This document describes the security content of iCloud for Windows 12.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

VulnCheck KEV: CVE-2021-30661

Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit Storage contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and...

About the security content of Security Update 2021-003 Mojave

About the security content of Security Update 2021-003 Mojave This document describes the security content of Security Update 2021-003 Mojave. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurre...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-32379)

Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...