2989 matches found
Important: Red Hat Security Advisory: webkit2gtk3 security update
An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
Important: webkit2gtk3 security update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash CVE-2024-44192 webkitgtk: A malicious website may exfiltrate data cross-origin CVE-2024-54467...
tarteaucitron.js allows prototype pollution via custom text injection
A vulnerability was identified in tarteaucitron.js, where the addOrUpdate function, used for applying custom texts, did not properly validate input. This allowed an attacker with direct access to the site's source code or a CMS plugin to manipulate JavaScript object prototypes, leading to potenti...
PT-2025-24556
Name of the Vulnerable Software and Affected Versions libarchive affected versions not specified Description A flaw has been identified in the libarchive library involving an 'off-by-one' miscalculation when handling prefixes and suffixes for file names. This can lead to a 1-byte write overflow,...
CVE-2025-3085 MongoDB Server running on Linux may allow unexpected connections where intermediate certificates are revoked
A MongoDB server under specific conditions running on Linux with TLS and CRL revocation status checking enabled, fails to check the revocation status of the intermediate certificates in the peer's certificate chain. In cases of MONGODB-X509, which is not enabled by default, this may lead to...
EulerOS 2.0 SP13 : dhcp (EulerOS-SA-2025-1314)
According to the versions of the dhcp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only...
CVE-2025-24235
A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A remote attacker may be able to cause unexpected app termination or heap corruption...
CVE-2025-24157
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to cause unexpected system termination or corrupt kernel memory...
CVE-2025-24269
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4. An app may be able to cause unexpected system termination...
CVE-2025-24247
A type confusion issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An attacker may be able to cause unexpected app termination...
CVE-2025-24190
A memory handling issue in the CoreMedia component of watchOS 11.4 (and other affected Apple platforms) allows processing a maliciously crafted video file to result in unexpected app termination or corrupt process memory . The vulnerability was addressed with improved memory handling. Affected sy...
CVE-2025-24216
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safari crash...
CVE-2025-24257
A kernel heap out-of-bounds (OOB) write vulnerability exists in the IOGPUFamily kernel extension (com.apple.IOGPU) due to an integer underflow in the newResourceGroup() function. Specifically, when the capacity parameter is 64, the calculation bitmap_mask = (capacity >> 6) - 1 results in 0x...
PT-2025-13929 · Apple · Macos Sonoma +3
Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.7.5 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description: A type confusion issue was addressed with improved checks. An attacker may be able to cause unexpected app...
CVE-2025-24265: Out-of-bounds Read
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to cause unexpected system termination...
Apple macOS 安全漏洞
Apple macOS is a specialized operating system developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS that stems from improper memory handling and could cause an application to trigger an unexpected system termination...
Vega vulnerable to Cross-site Scripting via RegExp.prototype[@@replace]
Impact Users running Vega/Vega-lite JSON definitions could run unexpected JavaScript code when drawing graphs, unless the library is used with the vega-interpreter. Workarounds - Use vega with expression interpreter - Upgrade to a newer Vega version 5.32.0 POC Summary Calling replace with a...
Netscaler sends Syslog messages for SSL Handshake with ””
Syslog messages sent from the NetScaler to the external Syslog Server includes unexpected occurrence of "\n" Interestingly, a pattern is seen where ”\n” is seen periodically after every 6 messagesor similar Need to know if this a normal behavior or it's an issue...
