Lucene search
+L

572 matches found

OSV
OSV
added 2023/05/10 6:15 a.m.6 views

AZL-26670 CVE-2023-32573 affecting package qt5-qtsvg for versions less than 5.15.9-1

In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg QSvgFont munitsPerEm initialization is mishandled...

6.5CVSS7AI score0.00884EPSS
SaveExploits0References1
OSV
OSV
added 2023/05/10 6:15 a.m.6 views

UBUNTU-CVE-2023-32573

In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg QSvgFont munitsPerEm initialization is mishandled...

6.5CVSS6.9AI score0.00884EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/05/10 12:0 a.m.5 views

Qt 数字错误漏洞

Qt is a cross-platform C++ application development framework from the Norwegian company Qt. It is widely used to develop GUI programs, in which case it is also known as the widget toolkit. It can also be used to develop non-GUI programs, such as console tools and servers. A security vulnerability...

6.5CVSS6.8AI score0.00884EPSS
SaveExploits0References6
The Hacker News
The Hacker News
added 2023/05/03 5:7 a.m.4 views

CISA Issues Advisory on Critical RCE Affecting ME RTU Remote Terminal Units

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday released an Industrial Control Systems ICS advisory about a critical flaw affecting ME RTU remote terminal units. The security vulnerability, tracked as CVE-2023-2131, has received the highest severity rating of 10.0 on the...

10CVSS8.4AI score0.01726EPSS
SaveExploits0
CNNVD
CNNVD
added 2023/04/24 12:0 a.m.4 views

CyberPower PowerPanel Business Edition 安全漏洞

Cyber Power Systems CyberPower PowerPanel Business Edition is a suite of power management software from Cyber Power Systems, USA. The software automates the shutdown of physical and virtual infrastructures and monitors and manages CyberPower UPS systems and network-connected PDUs Power Distributi...

9.8CVSS8.3AI score0.01034EPSS
SaveExploits0References6
CNVD
CNVD
added 2023/04/21 12:0 a.m.53 views

Schneider Electric Easergy Builder Code Issue Vulnerability

Schneider Electric Easergy Builder is a set of configuration software for Easergy remote terminal units and controllers from Schneider Electric, France. A code issue vulnerability exists in Schneider Electric Easergy Builder version 1.7.23 and earlier, which stems from the presence of an...

6.7CVSS7.6AI score0.00188EPSS
SaveExploits0References1
OSV
OSV
added 2023/04/05 4:15 p.m.7 views

CVE-2023-29389

Toyota RAV4 2021 vehicles automatically trust messages from other ECUs on a CAN bus, which allows physically proximate attackers to drive a vehicle by accessing the control CAN bus after pulling the bumper away and reaching the headlight connector, and then sending forged "Key is validated"...

6.8CVSS6.7AI score0.00655EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/02/27 12:0 a.m.12 views

PT-2023-1472 · Wago · Wago Cc100 +3

Name of the Vulnerable Software and Affected Versions: WAGO PFC100/PFC200 versions affected versions not specified WAGO CC100 versions affected versions not specified WAGO Edge Controller versions affected versions not specified WAGO Touch Panel 600 versions affected versions not specified...

9.8CVSS6.9AI score0.0074EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:45 a.m.4 views

SUSE CVE-2012-3420

Multiple memory leaks in Performance Co-Pilot PCP before 3.6.5 allow remote attackers to cause a denial of service memory consumption or daemon crash via a large number of PDUs with 1 a crafted context number to the DoFetch function in pmcd/src/dofetch.c or 2 a negative type value to the pmGetPDU...

5CVSS6.8AI score0.02435EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:32 a.m.5 views

SUSE CVE-2014-0081

Multiple cross-site scripting XSS vulnerabilities in actionview/lib/actionview/helpers/numberhelper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remote attackers to inject arbitrary web script or HTML via the 1 format, 2 negativeformat, or 3 units...

4.3CVSS6AI score0.04032EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 5:1 a.m.6 views

SUSE CVE-2016-5127

Use-after-free vulnerability in WebKit/Source/core/editing/VisibleUnits.cpp in Blink, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code involving an @import at-rule in a Cascadin...

7.5CVSS9.5AI score0.01311EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 4:49 a.m.23 views

SUSE CVE-2017-5898

Integer overflow in the emulatedapdufromguest function in usb/dev-smartcard-reader.c in Quick Emulator Qemu, when built with the CCID Card device emulator support, allows local users to cause a denial of service application crash via a large Application Protocol Data Units APDU unit...

5.5CVSS6.7AI score0.004EPSS
SaveExploits0References14
SUSE CVE
SUSE CVE
added 2023/02/15 3:44 a.m.5 views

SUSE CVE-2021-26341

Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage...

4.7CVSS9.4AI score0.00316EPSS
SaveExploits0References40
SUSE CVE
SUSE CVE
added 2023/02/15 3:22 a.m.4 views

SUSE CVE-2022-46880

A missing check related to tex units could have led to a use-after-free and potentially exploitable crash.Note: This advisory was added on December 13th, 2022 after we better understood the impact of the issue. The fix was included in the original release of Firefox 105. This vulnerability affect...

6.5CVSS8.8AI score0.00653EPSS
SaveExploits0References7
Openbugbounty
Openbugbounty
added 2023/01/05 5:44 a.m.13 views

units.uoalhuda.edu.iq Improper Access Control vulnerability OBB-3128719

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

0.1AI score
SaveExploits0
Veracode
Veracode
added 2022/12/27 4:50 a.m.33 views

Denial Of Service (DoS)

firefox is vulnerable to Denial Of Service DoS. A remote attacker is able to cause a use-after-free and a potentially exploitable crash via a missing check related to tex units...

6.5CVSS7.9AI score0.00653EPSS
SaveExploits0References7Affected Software3
OSV
OSV
added 2022/12/22 8:15 p.m.2 views

DEBIAN-CVE-2022-46880

A missing check related to tex units could have led to a use-after-free and potentially exploitable crash.Note: This advisory was added on December 13th, 2022 after we better understood the impact of the issue. The fix was included in the original release of Firefox 105. This vulnerability affect...

6.5CVSS7.1AI score0.00653EPSS
SaveExploits0References1
OSV
OSV
added 2022/12/22 8:15 p.m.5 views

UBUNTU-CVE-2022-46880

A missing check related to tex units could have led to a use-after-free and potentially exploitable crash.Note: This advisory was added on December 13th, 2022 after we better understood the impact of the issue. The fix was included in the original release of Firefox 105. This vulnerability affect...

6.5CVSS7.3AI score0.00653EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2022/12/22 12:0 a.m.26 views

CVE-2022-46880

A missing check related to tex units could have led to a use-after-free and potentially exploitable crash.Note: This advisory was added on December 13th, 2022 after we better understood the impact of the issue. The fix was included in the original release of Firefox 105. This vulnerability affect...

7.6AI score0.00653EPSS
SaveExploits0References6
CVE
CVE
added 2022/12/22 12:0 a.m.202 views

CVE-2022-46880

CVE-2022-46880 describes a missing check related to tex units that could cause a use-after-free and an exploitable crash. Affected products include Firefox (ESR < 102.6, and Firefox < 105) and Thunderbird

6.5CVSS7.4AI score0.00653EPSS
SaveExploits0References6Affected Software3
Rows per page
Query Builder