7625 matches found
FreeType 缓冲区错误漏洞
FreeType is an open source font rendering library written in the C language. A security vulnerability exists in FreeType, which stems from the commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was found to contain a heap buffer overflow via the function sfntinitface...
Signal iOS Client 注入漏洞
Signal iOS Client is a free open source messaging application from Signal Open Source. It is used for simple private communication with friends. Signal for iOS had a security vulnerability prior to version 5.34 that stemmed from allowing URI spoofing via RTLO injection. It incorrectly rendered...
Mozilla: iframe contents could be rendered outside the border
The Mozilla Foundation Security Advisory describes this flaw as: Due to a layout change, iframe contents could have been rendered outside of its border. This could have led to user confusion or spoofing attacks...
Code Injection in Bolt CMS
Bolt CMS = 4.2 is vulnerable to Remote Code Execution. Unsafe theme rendering allows an authenticated attacker to edit theme to inject server-side template injection that leads to remote code execution...
GHSA-GPRH-7767-CW39 Code Injection in Bolt CMS
Bolt CMS = 4.2 is vulnerable to Remote Code Execution. Unsafe theme rendering allows an authenticated attacker to edit theme to inject server-side template injection that leads to remote code execution...
CVE-2021-40219
Bolt CMS = 4.2 is vulnerable to Remote Code Execution. Unsafe theme rendering allows an authenticated attacker to edit theme to inject server-side template injection that leads to remote code execution...
CVE-2021-40219
Bolt CMS = 4.2 is vulnerable to Remote Code Execution. Unsafe theme rendering allows an authenticated attacker to edit theme to inject server-side template injection that leads to remote code execution...
CVE-2021-40219
Bolt CMS = 4.2 is vulnerable to Remote Code Execution. Unsafe theme rendering allows an authenticated attacker to edit theme to inject server-side template injection that leads to remote code execution...
Remote code execution
Bolt CMS = 4.2 is vulnerable to Remote Code Execution. Unsafe theme rendering allows an authenticated attacker to edit theme to inject server-side template injection that leads to remote code execution...
Mozilla: iframe contents could be rendered outside the border
The Mozilla Foundation Security Advisory describes this flaw as: Due to a layout change, iframe contents could have been rendered outside of its border. This could have led to user confusion or spoofing attacks...
Mozilla: iframe contents could be rendered outside the border
The Mozilla Foundation Security Advisory describes this flaw as: Due to a layout change, iframe contents could have been rendered outside of its border. This could have led to user confusion or spoofing attacks...
Mozilla: iframe contents could be rendered outside the border
The Mozilla Foundation Security Advisory describes this flaw as: Due to a layout change, iframe contents could have been rendered outside of its border. This could have led to user confusion or spoofing attacks...
The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the lack of protective measures for the structure of web pages, allows attackers to compromise data integrity.
The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...
Bolt CMS 代码注入漏洞
Bolt CMS is an open source PHP-based content management system for the Bolt BOLT community. Bolt CMS = 4.2 suffers from a security vulnerability that stems from insecure theme rendering. An authenticated attacker could edit the theme resulting in remote code execution...
The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the disclosure of information in erroneous data areas, allows attackers to gain access to confidential data.
The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...
Mozilla: iframe contents could be rendered outside the border
The Mozilla Foundation Security Advisory describes this flaw as: Due to a layout change, iframe contents could have been rendered outside of its border. This could have led to user confusion or spoofing attacks...
Mozilla: iframe contents could be rendered outside the border
The Mozilla Foundation Security Advisory describes this flaw as: Due to a layout change, iframe contents could have been rendered outside of its border. This could have led to user confusion or spoofing attacks...
Security fix for the ALT Linux 10 package java-1.8.0-openjdk version 0:1.8.0.322.b06-alt2_1jpp8
0:1.8.0.322.b06-alt21jpp8 built April 7, 2022 Andrey Cherepanov in task 295626 --- Feb. 18, 2022 Andrey Cherepanov - New version. - Security fixes: + JDK-8264934, CVE-2022-21248: Enhance cross VM serialization + JDK-8268488: More valuable DerValues + JDK-8268494: Better inlining of inlined...