20 matches found
EUVD-2006-5961
Malware in sbrugna...
PT-2025-15770 · Unknown · Wetterwarner
Name of the Vulnerable Software and Affected Versions: Wetterwarner versions n/a through 2.7.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables potential attackers to inject...
PT-2025-22231
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential lockup issue in the Linux kernel has been identified and resolved. The problem occurs in the st lsm6dsx read fifo function when pattern len is equal to zero and the device FI...
PT-2025-2837 · Allaccessible · Accessibility
Name of the Vulnerable Software and Affected Versions: Accessibility by AllAccessible versions 1.3.4 and earlier Description: The issue is related to an incorrect privilege assignment in AllAccessible Team Accessibility, allowing privilege escalation. This problem affects Accessibility by...
PT-2024-6483 · Google +4 · Google Chrome +5
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 129.0.6668.70 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in the V8 JavaScript engine, which could allow a remote attacker to potentially...
PT-2024-5303 · Google +4 · Google Chrome +4
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 127.0.6533.72 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in HTML, allowing a remote attacker to perform UI spoofing via a crafted HTML...
PT-2024-4238 · Google +6 · Google Chrome +7
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 126.0.6478.54 Microsoft Edge affected versions not specified Description: The issue is related to a Type Confusion in the V8 JavaScript engine, allowing a remote attacker to potentially perform out of bounds...
PT-2024-4375
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 124.0.6367.155 Microsoft Edge affected versions not specified Description The issue is related to a use after free flaw in the ANGLE component, which can be exploited by a remote attacker to potentially corrupt...
PT-2024-3933 · Google +6 · Google Chrome +6
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 125.0.6422.141 Microsoft Edge affected versions not specified Description: The issue is related to a use after free vulnerability in the Dawn component, which can be exploited by a remote attacker via a special...
PT-2024-3088
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 124.0.6367.60 Microsoft Edge affected versions not specified Description The issue is related to object corruption in WebAssembly, which could allow a remote attacker to potentially exploit object corruption via...
PT-2024-3081
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 124.0.6367.60 Microsoft Edge affected versions not specified Description: The issue is related to a use after free vulnerability in the QUIC protocol implementation, which could allow a remote attacker who has...
PT-2024-24581 · Unknown · Wptravelly
Name of the Vulnerable Software and Affected Versions: WpTravelly versions 1.6.0 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user without their knowledge or consent. Recommendations: For versio...
PT-2024-21785 · Ibm · Ibm Websphere Application Server Liberty
Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server Liberty versions 23.0.0.3 through 24.0.0.3 Description: This issue allows users to embed arbitrary JavaScript code in a specially crafted URI, potentially leading to cross-site scripting. The estimated number ...
PT-2024-1834 · Google +5 · Google Chrome +5
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 122.0.6261.57 Microsoft Edge affected versions not specified Description: The issue is related to a use after free vulnerability in the Accessibility component, which could allow a remote attacker who has...
PT-2024-1393 · Google +5 · Google Chrome +5
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 121.0.6167.85 Microsoft Edge affected versions not specified Description: The issue is related to a use after free in the Passwords component, which can potentially allow a remote attacker to exploit heap...
PT-2023-18300 · Linux · Linux
Name of the Vulnerable Software and Affected Versions: Linux affected versions not specified Description: The issue involves memory corruption in Linux when system configuration APIs are called. Recommendations: At the moment, there is no information about a newer version that contains a fix for...
PT-2022-10277 · Alt Linux +7 · Alt Linux +7
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An attacker who submits a crafted tar file with size in header struct being 0 may be able to trigger a call to malloc0 for a variable gnu longname,...
PT-2023-21656 · Unknown +1 · Moodle Lms +1
Name of the Vulnerable Software and Affected Versions: Moodle LMS affected versions not specified Description: The Mustache pix helper contained a potential Mustache injection risk if combined with user input. It is noted that this issue did not appear to be implemented or exploitable anywhere in...
PT-2009-4174 · Apple · Ios +2
Name of the Vulnerable Software and Affected Versions: WebKit versions before r41741 Apple iPhone OS versions 1.0 through 2.2.1 Apple iPhone OS for iPod touch versions 1.1 through 2.2.1 Safari affected versions not specified Description: The issue allows remote attackers to cause a denial of...
PT-2007-5829 · Apple · Iphone +2
Name of the Vulnerable Software and Affected Versions: Safari versions prior to 3.0.4 on Windows and Mac OS X Safari in Apple iPhone version 1.1.1 Description: The issue allows remote attackers to alter or access HTTPS content via an HTTP session with a crafted web page that causes Javascript to ...