Lucene search
+L

114 matches found

UbuntuCve
UbuntuCve
added 2023/04/24 12:00 a.m.46 views

CVE-2023-27932

This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, tvOS 16.4, watchOS 9.4. Processing maliciously crafted web content may bypass Same Origin Policy...

5.5CVSS6.8AI score0.00202EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/12/14 12:00 a.m.9 views

The vulnerability of the SuiteLink server, related to insufficient handling of exceptional states, allows a perpetrator to trigger a service failure.

The vulnerability of the SuiteLink server is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

7.8CVSS7.2AI score0.00961EPSS
SaveExploits0References3Affected Software3
RedHat Linux
RedHat Linux
added 2022/05/10 1:27 p.m.10 views

webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution

A flaw was found in webkitgtk. The vulnerability occurs due to improper state handling, which can lead to a race condition. An attacker with network access could pass specially crafted web content files causing an application to halt, crash, or may lead to arbitrary code execution...

7.5CVSS6AI score0.01656EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2022/01/31 12:00 a.m.37 views

Apple Safari Security Update (HT213058)

Apple Safari is prone to multiple vulnerabilities according to Apple security advisory. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.8CVSS7.3AI score0.02005EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2022/01/31 12:00 a.m.48 views

Apple Mac OS X Security Update (HT213056)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.6AI score0.01803EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2022/01/24 6:52 p.m.38 views

CVE-2021-30984

A flaw was found in webkitgtk. The vulnerability occurs due to improper state handling, which can lead to a race condition. An attacker with network access could pass specially crafted web content files causing an application to halt, crash, or may lead to arbitrary code execution...

7.5CVSS4.9AI score0.01656EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:00 a.m.10 views

The vulnerability of software for performing virtualization at the operating system level, also known as containerization, Singularity, arises from insufficient checking of unusual or exceptional states. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of software for performing virtualization at the operating system level, also known as containerization, is related to improper checking of the return value of functions. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise it...

9.8CVSS7.7AI score0.01258EPSS
SaveExploits0References4Affected Software2
CNVD
CNVD
added 2021/02/06 12:00 a.m.41 views

NETGEAR R7450 Certification Bypass Vulnerability

NETGEAR R7450 is a router from Netgear, Inc. A hardware device that connects two or more networks and acts as a gateway between networks, the NETGEAR R7450 is vulnerable to an authentication bypass vulnerability that stems from improper state tracking during password recovery. An attacker could...

8.8CVSS2.4AI score0.00898EPSS
SaveExploits0References1
NVD
NVD
added 2021/02/04 5:15 p.m.36 views

CVE-2020-27872

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 1.2.0.621.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the minihttpd service, which listens on TCP port 80 by...

8.8CVSS0.00898EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/02/04 4:45 p.m.33 views

CVE-2020-27872

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 1.2.0.621.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the minihttpd service, which listens on TCP port 80 by...

8.8CVSS9.1AI score0.00898EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/02/04 12:00 a.m.25 views

NETGEAR R7450 安全漏洞

NETGEAR R7450 is a router from Netgear, Inc. A hardware device that connects two or more networks and acts as a gateway between networks, the NETGEAR R7450 is vulnerable to an authentication bypass vulnerability that stems from improper state tracking during password recovery. An attacker could...

8.8CVSS7.3AI score0.00898EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2021/02/03 12:00 a.m.25 views

Apple Mac OS X Security Updates (HT212147)-03

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.2AI score0.03142EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2019/11/13 12:00 a.m.318 views

macOS 10.15.x < 10.15.1 / 10.14.x < 10.14.6 Security Update 2019-001 / 10.13.x < 10.13.6 Security Update 2019-006

The remote host is running a version of macOS or Mac OS X that is 10.15.x prior to 10.15.1, 10.14.x prior to 10.14.6 security update 2019-001, 10.13.x prior to 10.13.6 security update 2019-006. It is, therefore, affected by multiple vulnerabilities : - An out-of-bounds read error exists in the...

10CVSS6.9AI score0.07314EPSS
SaveExploits14References52
OpenVAS
OpenVAS
added 2019/11/05 12:00 a.m.54 views

Apple iTunes Security Updates (HT210726)

Apple iTunes is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:itunes"; ifdescription...

9.3CVSS7.7AI score0.09543EPSS
SaveExploits3References1
Rows per page
Query Builder