F5 BIG-IQ Command Injection (CVE-2021-23024)

A command injection vulnerability exists in F5 BIG-IQ. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2021-23054

On version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, a reflected cross-site scripting XSS vulnerability exists in the resource information page for authenticated users when a full webtop is configured on the BIG-IP APM system...

CVE-2021-23054

On version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, a reflected cross-site scripting XSS vulnerability exists in the resource information page for authenticated users when a full webtop is configured on the BIG-IP APM system...

CVE-2021-23054

CVE-2021-23054 : A reflected XSS vulnerability exists in the resource information page for authenticated users when a full webtop is configured on BIG-IP APM. Affected: BIG-IP APM across multiple branches (16.x before 16.1.0; 15.x before 15.1.4; 14.x before 14.1.4.4; and all 13.1.x, 12.1.x, 11.6....

F5 Networks BIG-IP : BIG-IP APM XSS vulnerability (K41997459)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.4.4 / 15.1.4 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K41997459 advisory. - On version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x,...

Fixed vulnerability in Big-IP Access Policy Manager (APM).

The vulnerability allows an unauthenticated malicious person to opportunity to execute arbitrary code on the browser of the victim. To do this, the malicious party must trick the victim into to follow a rogue hyperlink. BIG-IP has released updates to fix the vulnerability. More information can be...

F5 BIG-IP APM 跨站脚本漏洞

F5 BIG-IP APM is a suite of access and security solutions from F5 USA. The product provides unified access to business-critical applications and networks. The BIG-IP APM system has a security vulnerability that allows an attacker to create a malicious URL and send it to an authenticated user in...

VulnCheck KEV: CVE-2022-1388

F5 BIG-IP contains a missing authentication in critical function vulnerability which can allow for remote code execution, creation or deletion of files, or disabling services...

Unpatched Apple Zero-Day Allows Code Execution

A zero-day security vulnerability in Apple’s macOS Finder system could allow remote attackers to trick users into running arbitrary commands, according to researchers – and a silent patch hasn’t fixed it. For those not in the Apple camp, the macOS Finder is the default file manager and GUI...

Debian DSA-4976-1 : wpewebkit - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-4976 advisory. The following vulnerabilities have been discovered in the wpewebkit web engine: CVE-2021-30858 An anonymous researcher discovered that processing maliciously crafted web...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. A security vulnerability exists in Apple macOS Big Sur, which can be exploited by local users to read kernel memory...

Apple macOS Big Sur 安全漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. A security vulnerability exists in Apple macOS Big Sur, which can be exploited by a local attacker to execute arbitrary files. No further information about this vulnerability is available at this time, so please stay tuned to CNNVD o...

Apple macOS Big Sur 缓冲区错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. A security vulnerability exists in Apple macOS Big Sur, which can be exploited by attackers to execute arbitrary code. No further information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor...

Apple macOS Big Sur缓冲区错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. Apple macOS Big Sur has a security vulnerability that can be exploited by local attackers to elevate its privileges. No further information on this vulnerability is available at this time, so stay tuned to CNNVD or the vendor...

Apple macOS Catalina 缓冲区错误漏洞

Apple macOS Catalina is a proprietary operating system developed by Apple Inc. for Mac computers. A buffer error vulnerability exists in Apple macOS Catalina and Apple macOS Big Sur, which originates from a boundary error when processing HTML content in WebKit. A remote attacker could use this...

Apple macOS Big Sur 安全漏洞

Apple macOS Big Sur is a mobile application app from Apple, Inc. A security vulnerability exists in macOS Big Sur, which can be exploited by an attacker to perform a local power lift...

Apple macOS Big Sur安全漏洞

Apple macOS Big Sur is a mobile app from Apple. A security vulnerability exists in macOS Big Sur, which can be exploited by an attacker to allow a local user to read arbitrary files, perhaps as root...

About the security content of Xcode 13

About the security content of Xcode 13 This document describes the security content of Xcode 13. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recen...

golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents

A flaw was found in Go, where it attempts to allocate excessive memory. This issue may cause panic or unrecoverable fatal error if passed inputs with very large exponents. The highest threat from this vulnerability is to system availability...

macOS 11.x < 11.6 (HT212804)

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.6 Big Sur. It is, therefore, affected by multiple vulnerabilities including the following: - A use after free issue was addressed with improved memory management. Exploitation of this vulnerability may lead to...