Lucene search
+L

1297 matches found

VulnCheck KEV
VulnCheck KEV
added 2023/09/07 12:00 a.m.7 views

VulnCheck KEV: CVE-2023-41064

Apple iOS, iPadOS, and macOS contain a buffer overflow vulnerability in ImageIO when processing a maliciously crafted image, which may lead to code execution. This vulnerability was chained with CVE-2023-41061...

7.8CVSS7.6AI score0.4506EPSS
SaveExploits2References1
BDU FSTEC
BDU FSTEC
added 2023/09/05 12:00 a.m.14 views

The vulnerability of the ImageIO component in the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine allows a hacker to trigger a service failure.

The vulnerability of the ImageIO component in Oracle Java SE and the Oracle GraalVM Enterprise Edition software platform is related to unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

5.3CVSS6.2AI score0.03216EPSS
SaveExploits0References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/09/04 12:00 a.m.13 views

The vulnerability of the ImageIO component in the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine allows a hacker to trigger a service failure.

The vulnerability of the ImageIO component in Oracle Java SE and the Oracle GraalVM Enterprise Edition software platform is related to unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

5.3CVSS6.2AI score0.03091EPSS
SaveExploits0References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/09/04 12:00 a.m.12 views

The vulnerability of the ImageIO component in the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine allows a hacker to trigger a service failure.

The vulnerability of the ImageIO component in Oracle Java SE and the Oracle GraalVM Enterprise Edition software platform is related to unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

5.3CVSS6.7AI score0.0679EPSS
SaveExploits0References18Affected Software7
Zero Day Initiative
Zero Day Initiative
added 2023/08/25 12:00 a.m.42 views

Apple macOS ImageIO EXR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the ImageIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the ImageIO...

7.8CVSS7.2AI score0.00282EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/08/25 12:00 a.m.28 views

Apple macOS EXR Image Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ImageIO framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS6.2AI score0.00247EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/08/22 12:00 a.m.11 views

PT-2023-4994

Name of the Vulnerable Software and Affected Versions Apple iOS, iPadOS, and macOS versions prior to 16.6.1 Apple macOS Monterey versions prior to 12.6.9 Apple macOS Ventura versions prior to 13.5.2 Apple iOS versions prior to 15.7.9 Apple iPadOS versions prior to 15.7.9 Apple macOS Big Sur...

7.8CVSS8.4AI score0.4506EPSS
SaveExploits2References171
Zero Day Initiative
Zero Day Initiative
added 2023/08/22 12:00 a.m.31 views

Apple macOS KTX Image Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ImageIO framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS6.2AI score0.00231EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/05/29 12:00 a.m.10 views

The vulnerability of the ImageIO component in operating systems such as MacOS, iOS, tvOS, iPadOS, and watchOS allows attackers to execute arbitrary code.

The vulnerability of the ImageIO component in operating systems such as MacOS, iOS, tvOS, iPadOS, and watchOS is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

5.3CVSS8AI score0.00282EPSS
SaveExploits0References6Affected Software5
Tenable Nessus
Tenable Nessus
added 2023/05/23 12:00 a.m.72 views

Apple iOS < 16.5 Multiple Vulnerabilities (HT213757)

Binary data appleios165check.nbin...

9.8CVSS7.6AI score0.1653EPSS
SaveExploits2References47
Apple
Apple
added 2023/05/18 12:00 a.m.289 views

About the security content of watchOS 9.5

About the security content of watchOS 9.5 This document describes the security content of watchOS 9.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.8CVSS9.3AI score0.1653EPSS
SaveExploits2References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/05/18 12:00 a.m.8 views

PT-2023-2898 · Apple · Macos Monterey +8

Name of the Vulnerable Software and Affected Versions: watchOS versions 9.5 and earlier tvOS versions 16.5 and earlier macOS Ventura versions 13.4 and earlier iOS versions 15.7.6 and 16.5 and earlier iPadOS versions 15.7.6 and 16.5 and earlier macOS Big Sur versions 11.7.7 and earlier macOS...

7.8CVSS7.6AI score0.00282EPSS
SaveExploits0References22
Apple
Apple
added 2023/05/18 12:00 a.m.101 views

About the security content of tvOS 16.5

About the security content of tvOS 16.5 This document describes the security content of tvOS 16.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.8CVSS9.2AI score0.1653EPSS
SaveExploits2References1Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2023/05/17 12:00 a.m.41 views

Apple macOS KTX Image Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ImageIO framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS6.2AI score0.00247EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/17 12:00 a.m.42 views

Apple macOS KTX Image Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ImageIO framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS6.2AI score0.00939EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2023/05/02 12:20 p.m.47 views

Security Bulletin: IBM Spectrum Scale Transparent Cloud Tiering is affected by multiple vulnerabilities in IBM® Runtime Environment Java™

Summary Multiple vulnerabilities were disclosed as part of the Oracle October 2021 Critical Patch Update. Vulnerability Details CVEID:CVE-2021-35560 DESCRIPTION: An unspecified vulnerability in Java SE related to the Deployment component could allow an unauthenticated attacker to take control of...

9.8CVSS9AI score0.159EPSS
SaveExploits0Affected Software1
Rosalinux
Rosalinux
added 2023/03/28 1:38 p.m.57 views

Advisory ROSA-SA-2023-2136

Software: java-11-openjdk 11.0.18.0.10-1 OS: rosa-server79 packageevrstring: 11.0.18.0.10-1 CVE-ID: CVE-2022-21365 BDU-ID: 2022-02011 CVE-Crit: MEDIUM CVE-DESC: A vulnerability in the ImageIO component of the Oracle Java SE software platform and Oracle GraalVM Enterprise Edition virtual machine i...

5.3CVSS5.9AI score0.08346EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/03/27 12:00 a.m.7 views

PT-2023-8411 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 tvOS versions prior to 16.4 iOS versions prior to 16.4 iPadOS versions prior to 16.4 watchOS versions prior to 9.4 Description: The issue is related to an out-of-bounds read in the ImageIO component, which can...

7.8CVSS6.2AI score0.0052EPSS
SaveExploits0References10
Apple
Apple
added 2023/03/27 12:00 a.m.56 views

About the security content of tvOS 16.4

About the security content of tvOS 16.4 This document describes the security content of tvOS 16.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.8CVSS8.6AI score0.01174EPSS
SaveExploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/03/10 12:00 a.m.41 views

SUSE SLES11: java-1_7_0-ibm / java-1_7_0-ibm-alsa / java-1_7_0-ibm-devel / etc (SUSE-SU-2022:14926-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:14926-1 advisory. Update Java 7.0 to Service Refresh 11 Fix Pack 5 bsc1197126. Including fixes for the following vulnerabilities: CVE-2022-21366, CVE-2022-21365...

5.3CVSS6.3AI score0.08346EPSS
SaveExploits0References52
Rows per page
Query Builder