openSUSE 15 Security Update : webkit2gtk3 (openSUSE-SU-2022:0182-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0182-1 advisory. - Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1, iCloud for Windows...

Vulnerabilities of the built-in software on NETGEAR Wi-Fi routers such as R6700AX, R7800, R8900, R9000, RAX10, RAX120v1, RAX120v2, RAX70, RAX78, XR450, XR500, XR700, and the low-cost LTE modem LBR1020; vulnerabilities of the wireless signal amplifiers EX2700, WN3000RPv2, WN3000RPv3; and vulnerabilities of the Orbi Wi-Fi system LBR20—all related to the lack of measures to protect input data. These vulnerabilities allow attackers to execute arbitrary commands or gain unauthorized access to protected information.

The vulnerabilities of NETGEAR Wi-Fi routers such as R6700AX, R7800, R8900, R9000, RAX10, RAX120v1, RAX120v2, RAX70, RAX78, XR450, XR500, XR700, and the low-cost LTE modem LBR1020, as well as wireless signal amplifiers like EX2700, WN3000RPv2, WN3000RPv3, and the Orbi Wi-Fi system LBR20, are...

USN-5249-1 usbview vulnerability

It was discovered that USBView allowed unprivileged users to run usbview as root. A local attacker could use this vulnerability to gain administrative privileges or cause a denial of service...

SUSE: Security Advisory (SUSE-SU-2022:0142-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OESA-2022-1489 udisks2 security update

The Udisks project provides a daemon, tools and libraries to access and manipulate disks, storage devices and technologies. Security Fixes: Vulnerability found in udisks2. The vulnerability allows an attacker to enter a specially crafted image file/USB to cause a kernel panic. The biggest threat ...

CVE-2021-30285

creationtimestamp| type| source ---|---|--- 2022-01-13 14:18:09+00:00| seen| https://t.me/cibsecurity/35395...

CVE-2021-30298

Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interface in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wire...

Brave Software: Universal XSS with Playlist feature

A Universal XSS vulnerability was discovered in Brave iOS versions 1.32.3 and higher. The vulnerability was caused by three weaknesses, including the exposure of UserScriptManager.securityToken and UserScriptManager.messageHandlerToken, as well as a UXSS vulnerability in PlaylistHelper through...

CVE-2021-45603

Certain NETGEAR devices are affected by disclosure of sensitive information. A UPnP request reveals a device's serial number, which can be used for a password reset. This affects D7800 before 1.0.1.66, EX2700 before 1.0.1.68, WN3000RPv2 before 1.0.0.90, WN3000RPv3 before 1.0.2.100, LBR1020 before...

Debian: Security Advisory (DSA-5031-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-5030-1 : webkit2gtk - security update

The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5030 advisory. The following vulnerabilities have been discovered in the webkit2gtk web engine: CVE-2021-30887 Narendra Bhati discovered that processing maliciously crafted...

Debian DSA-5031-1 : wpewebkit - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5031 advisory. - A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processi...

[SECURITY] [DSA 5030-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5030-1 [email protected] https://www.debian.org/security/ Alberto Garcia December 23, 2021 https://www.debian.org/security/faq -...

TP-Link TL-WR802N OS Command Injection Vulnerability

TP-Link TL-WR802N is a wireless router from China Universal Link TP-Link.TP-Link TL-WR802N V4 suffers from an operating system command injection vulnerability, which stems from the fact that TP-Link wifi router TL-WR802N V4 is vulnerable to operating system command injection attacks. No detailed...

CVE-2021-30890

A logic issue was found in WebKitGTK. Specially crafted web content could use this flaw to trigger a universal cross-site scripting when processed...

Universal XSS

Firefox for android is vulnerable to universal XSS. it is caused by improper sanitization when processing a URL scanned from a QR code...

CVE-2021-23862

creationtimestamp| type| source ---|---|--- 2021-12-09 00:24:12+00:00| seen| https://t.me/cibsecurity/33659...

CVE-2021-43530

A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a QR code. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 94...

Design/Logic Flaw

A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a QR code. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 94...

CVE-2021-43530

A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a QR code. This bug only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox 94...