Lucene search
+L

7689 matches found

Positive Technologies
Positive Technologies
added 2022/09/21 12:00 a.m.8 views

PT-2022-6170

Name of the Vulnerable Software and Affected Versions SDL2 versions 2.0.4 and above Description A potential memory leak issue was discovered in the GLES CreateTexture function in SDL render gles.c. This issue allows an attacker to cause a denial of service attack by exploiting the memory leak. Th...

8.8CVSS7.5AI score0.03699EPSS
SaveExploits13References106
OSV
OSV
added 2022/09/20 12:00 a.m.29 views

ALSA-2022:6634 Moderate: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have been upgraded to a later upstream version: webkit2gtk3 2.36.7. Security Fixes: webkitgtk: processing maliciously crafted web content may lead to arbitrary code execution CVE-2022-328...

8.8CVSS9.3AI score0.09931EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
added 2022/09/20 12:00 a.m.82 views

Moderate: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. The following packages have been upgraded to a later upstream version: webkit2gtk3 2.36.7. Security Fixes: webkitgtk: processing maliciously crafted web content may lead to arbitrary code execution CVE-2022-328...

8.8CVSS9.2AI score0.09931EPSS
SaveExploits0References4
Microsoft KB
Microsoft KB
added 2022/09/20 12:00 a.m.25 views

September 20, 2022—KB5017381 (OS Build 20348.1070) Preview

None None...

5.3AI score
SaveExploits0
NVD
NVD
added 2022/09/19 9:15 p.m.20 views

CVE-2022-28204

A denial-of-service issue was discovered in MediaWiki 1.37.x before 1.37.2. Rendering of w/index.php?title=Special%3AWhatLinksHere&target=Property%3AP31&namespace=1&invert=1 can take more than thirty seconds. There is a DDoS risk...

7.5CVSS0.00949EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2022/09/19 9:15 p.m.32 views

CVE-2022-28204

A denial-of-service issue was discovered in MediaWiki 1.37.x before 1.37.2. Rendering of w/index.php?title=Special%3AWhatLinksHere&target=Property%3AP31&namespace=1&invert=1 can take more than thirty seconds. There is a DDoS risk...

7.5CVSS7.1AI score0.00949EPSS
SaveExploits1References3
OSV
OSV
added 2022/09/19 9:15 p.m.10 views

UBUNTU-CVE-2022-28204

A denial-of-service issue was discovered in MediaWiki 1.37.x before 1.37.2. Rendering of w/index.php?title=Special%3AWhatLinksHere&target=Property%3AP31&namespace=1&invert=1 can take more than thirty seconds. There is a DDoS risk...

7.5CVSS7.1AI score0.00949EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2022/09/19 8:48 p.m.4 views

CVE-2022-28204

A denial-of-service issue was discovered in MediaWiki 1.37.x before 1.37.2. Rendering of w/index.php?title=Special%3AWhatLinksHere&target=Property%3AP31&namespace=1&invert=1 can take more than thirty seconds. There is a DDoS risk...

7.5AI score0.00949EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2022/09/19 12:00 a.m.15 views

The vulnerability of the WebPage rendering module in WebKitGTK, related to the disclosure of information in erroneous data areas, allows attackers to access confidential data.

The vulnerability of the WebPageRendering module in WebKitGTK relates to the disclosure of information in erroneous data areas. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

7.1CVSS6.9AI score0.01389EPSS
SaveExploits0References8Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/09/19 12:00 a.m.9 views

The vulnerability of the WPE WebKit web page rendering module, related to the lack of measures taken to protect the structure of the web page, allows attackers to access confidential data.

The vulnerability of the WPE WebKit web page rendering module is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

4.7CVSS6.1AI score0.0116EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/19 12:00 a.m.9 views

The vulnerability of the WPE WebKit web page rendering module, related to the transmission of protected information in unencrypted form, allows attackers to compromise data integrity.

The vulnerability of the WPE WebKit web page rendering module is related to the transmission of protected information in an unencrypted form. Exploiting this vulnerability allows a remote attacker to compromise the integrity of data...

6.8CVSS6.5AI score0.02231EPSS
SaveExploits0References8Affected Software5
Ubuntu
Ubuntu
added 2022/09/14 11:09 p.m.34 views

USN-5606-2: poppler regression

USN-5606-1 fixed a vulnerability in poppler. Unfortunately it was missing a commit to fix it properly. This update provides the corresponding fix for Ubuntu 18.04 LTS and Ubuntu 16.04 ESM. We apologize for the inconvenience. Original advisory details: It was discovered that poppler incorrectly...

5.9AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/09/14 12:00 a.m.12 views

The vulnerability of the WPE WebKit web page rendering module, related to the use of open redirection, allows attackers to access confidential data.

The vulnerability of the WPE WebKit web page rendering module is related to the use of open redirection. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

7.4CVSS6.6AI score0.01729EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/14 12:00 a.m.11 views

The vulnerability of the WebPage rendering module in WebKitGTK, related to insufficient input data validation, allows attackers to compromise data integrity.

The vulnerability of the WebPage rendering module in WebKitGTK is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to compromise the integrity of data...

6.1CVSS6.5AI score0.02005EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/14 12:00 a.m.9 views

The vulnerability of the WPE WebKit web page rendering module, related to the use of an untrusted intermediate policy file, allows a attacker to compromise data integrity.

The vulnerability of the WPE WebKit web page rendering module is related to the use of an untrusted intermediate policy file. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

7.1CVSS6.5AI score0.01784EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/14 12:00 a.m.8 views

The vulnerability of the WPE WebKit web page rendering module, related to the lack of measures taken to protect the structure of the web page, allows attackers to compromise the integrity of the data.

The vulnerability of the WPE WebKit web page rendering module is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of the data...

6.1CVSS6.5AI score0.01456EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/14 12:00 a.m.15 views

The vulnerability of the WebPage rendering module in WebKitGTK, related to the use of memory after it is freed, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebPageRendering module in WebKitGTK relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.1AI score0.01555EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/14 12:00 a.m.10 views

The vulnerability of the WPE WebKit web page rendering module, related to copying buffers without checking input data, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WPE WebKit web page rendering module is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS6.6AI score0.01932EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/14 12:00 a.m.13 views

The vulnerability of the WebPage rendering module in WebKitGTK, related to improper limitation of the number of user interface layers that can be rendered, allows attackers to compromise data integrity.

The vulnerability of the WebPage rendering module in WebKitGTK is related to an improper limitation on the number of user interface layers that can be rendered. Exploiting this vulnerability allows a remote attacker to compromise the integrity of data...

7.1CVSS6.5AI score0.01623EPSS
SaveExploits0References8Affected Software5
Ubuntu
Ubuntu
added 2022/09/12 6:25 p.m.77 views

USN-5606-1: poppler vulnerability

It was discovered that poppler incorrectly handled certain PDF. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code...

7.8CVSS8.3AI score0.00627EPSS
SaveExploits1
Rows per page
Query Builder