Lucene search
+L

14082 matches found

BDU FSTEC
BDU FSTEC
added 2022/05/23 12:0 a.m.9 views

The vulnerability of the Web page rendering module in the WebKit browser of Apple’s Safari, which allows a hacker to execute arbitrary code.

The vulnerability of the Web page rendering module in the WebKit browser of Apple’s Safari browser relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS5.9AI score0.01485EPSS
SaveExploits0References2Affected Software3
Apple
Apple
added 2022/05/18 12:0 a.m.64 views

About the security content of iTunes 12.12.4 for Windows

About the security content of iTunes 12.12.4 for Windows This document describes the security content of iTunes 12.12.4 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

9.8CVSS9.3AI score0.03782EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2022/05/17 1:56 a.m.9 views

GHSA-9568-HCJ9-RF7V Webkit PDFs for TYPO3 has SQL Injection vulnerability

SQL injection vulnerability in the Webkit PDFs webkitpdf extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

9.3CVSS8.7AI score0.0111EPSS
SaveExploits0References6
OSV
OSV
added 2022/05/17 1:56 a.m.13 views

GHSA-XQ29-JCJ7-XG86 Webkit PDFs for TYPO3 allows remote attackers to execute arbitrary commands

Unspecified vulnerability in the Webkit PDFs webkitpdf extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors...

9.3CVSS7.9AI score0.01862EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2022/05/17 1:56 a.m.9 views

Webkit PDFs for TYPO3 has SQL Injection vulnerability

SQL injection vulnerability in the Webkit PDFs webkitpdf extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

7.5CVSS9AI score0.0111EPSS
SaveExploits0References6Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/17 1:56 a.m.16 views

Webkit PDFs for TYPO3 allows remote attackers to execute arbitrary commands

Unspecified vulnerability in the Webkit PDFs webkitpdf extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors...

7.5CVSS8.1AI score0.01862EPSS
SaveExploits0References6Affected Software1
CNNVD
CNNVD
added 2022/05/16 12:0 a.m.9 views

Apple tvOS 缓冲区错误漏洞

Apple tvOS is an operating system for Smart TVs from Apple. Apple tvOS suffers from a buffer error vulnerability that stems from a boundary error in WebKit's handling of HTML content. A remote attacker could trick a victim into visiting a specially crafted website, trigger a memory corruption, an...

8.8CVSS8.7AI score0.00949EPSS
SaveExploits0References28
CNNVD
CNNVD
added 2022/05/16 12:0 a.m.5 views

Apple tvOS 缓冲区错误漏洞

Apple tvOS is an operating system for Smart TVs from Apple. Apple tvOS suffers from a buffer error vulnerability that stems from a boundary error in WebKit's handling of HTML content. A remote attacker could trick a victim into visiting a specially crafted website, trigger a memory corruption, an...

8.8CVSS8.7AI score0.00905EPSS
SaveExploits0References29
Positive Technologies
Positive Technologies
added 2022/05/16 12:0 a.m.7 views

PT-2022-3417 · Apple +8 · Ipados +13

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 15.5 Apple iPadOS versions prior to 15.5 Apple macOS versions prior to 12.4 Apple Safari versions prior to 15.5 Apple tvOS versions prior to 15.5 Apple watchOS versions prior to 8.6 Description: A memory corruption...

10CVSS8.5AI score0.06701EPSS
SaveExploits1References139
Positive Technologies
Positive Technologies
added 2022/05/16 12:0 a.m.8 views

PT-2022-7003 · Apple +9 · Webkit +14

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.5 iPadOS versions prior to 15.5 macOS Monterey versions prior to 12.4 tvOS versions prior to 15.5 watchOS versions prior to 8.6 Description: A use after free issue was addressed with improved memory management. This...

10CVSS7.7AI score0.06701EPSS
SaveExploits1References133
CNNVD
CNNVD
added 2022/05/16 12:0 a.m.5 views

Apple tvOS 缓冲区错误漏洞

Apple tvOS is a smart TV operating system from Apple, Inc. A buffer error vulnerability exists in tvOS versions 15.0 19J346 - 15.4.1 19L452, which stems from a boundary error when processing HTML content in WebKit. A remote attacker could exploit this vulnerability to execute arbitrary code on th...

8.8CVSS8.6AI score0.01309EPSS
SaveExploits0References31
Positive Technologies
Positive Technologies
added 2022/05/16 12:0 a.m.7 views

PT-2022-3415 · Apple +8 · Ipados +14

Name of the Vulnerable Software and Affected Versions: Apple tvOS versions prior to 15.5 Apple iOS versions prior to 15.5 Apple iPadOS versions prior to 15.5 Apple watchOS versions prior to 8.6 Apple macOS Monterey versions prior to 12.4 Apple Safari versions prior to 15.5 Description: A memory...

10CVSS8.5AI score0.06701EPSS
SaveExploits1References138
CNNVD
CNNVD
added 2022/05/16 12:0 a.m.4 views

Apple tvOS 资源管理错误漏洞

Apple tvOS is an operating system for Smart TVs from Apple. Apple tvOS suffers from a resource management error vulnerability that originates from a post-release reuse error in WebKit when processing HTML content. A remote attacker could trick a victim into visiting a specially crafted website,...

8.8CVSS8.5AI score0.01485EPSS
SaveExploits0References30
Apple
Apple
added 2022/05/16 12:0 a.m.911 views

About the security content of Safari 15.5

About the security content of Safari 15.5 This document describes the security content of Safari 15.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

8.8CVSS9.8AI score0.01485EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/05/16 12:0 a.m.5 views

Apple tvOS 资源管理错误漏洞

Apple tvOS is a smart TV operating system from Apple, Inc. A resource management error vulnerability exists in Apple tvOS versions 15.0 19J346 - 15.4.1 19L452, which originates from a use-after-release error when processing HTML content in WebKit. A remote attacker could exploit this vulnerabilit...

8.8CVSS7.9AI score0.00879EPSS
SaveExploits0References29
CNNVD
CNNVD
added 2022/05/16 12:0 a.m.5 views

Apple tvOS 资源管理错误漏洞

Apple tvOS is a smart TV operating system from Apple, Inc. A resource management error vulnerability exists in Apple tvOS versions 15.0 19J346 - 15.4.1 19L452, which originates from a use-after-release error when processing HTML content in WebKit. A remote attacker could exploit this vulnerabilit...

8.8CVSS7.9AI score0.00879EPSS
SaveExploits0References29
Positive Technologies
Positive Technologies
added 2022/05/16 12:0 a.m.4 views

PT-2022-2641 · Apple +8 · Macos Monterey +17

Name of the Vulnerable Software and Affected Versions: Apple Safari versions prior to 15.5 Apple tvOS versions prior to 15.5 Apple watchOS versions prior to 8.6 Apple iOS versions prior to 15.5 Apple iPadOS versions prior to 15.5 Apple macOS Monterey versions prior to 12.4 Apple iTunes for Window...

10CVSS8.4AI score0.06701EPSS
SaveExploits1References148
OSV
OSV
added 2022/05/13 1:19 a.m.100 views

GHSA-5P4H-3377-7W67 golang.org/x/net/html NULL Pointer Dereference vulnerability

The html package aka x/net/html before 2018-07-13 in Go mishandles "in frameset" insertion mode, leading to a "panic: runtime error" for html.Parse of , , or . This is related to HTMLTreeBuilder.cpp in WebKit...

7.5CVSS7.4AI score0.02774EPSS
SaveExploits1References12
Github Security Blog
Github Security Blog
added 2022/05/13 1:19 a.m.29 views

golang.org/x/net/html NULL Pointer Dereference vulnerability

The html package aka x/net/html before 2018-07-13 in Go mishandles "in frameset" insertion mode, leading to a "panic: runtime error" for html.Parse of , , or . This is related to HTMLTreeBuilder.cpp in WebKit...

7.5CVSS1.2AI score0.02774EPSS
SaveExploits1References12Affected Software1
GitLab Advisory Database
GitLab Advisory Database
added 2022/05/13 12:0 a.m.77 views

NULL Pointer Dereference

The html package aka x/net/html before 2018-07-13 in Go mishandles "in frameset" insertion mode, leading to a "panic: runtime error" for html.Parse of , , or . This is related to HTMLTreeBuilder.cpp in WebKit...

7.5CVSS1.2AI score0.02774EPSS
SaveExploits1References12Affected Software1
Rows per page
Query Builder