Type confusion

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3. Processing web content may lead to arbitrary code execution...

Design/Logic Flaw

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3. Processing web content may lead to arbitrary code execution...

CVE-2022-48503

The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing web content may lead to arbitrary code execution...

CVE-2022-48503

The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing web content may lead to arbitrary code execution...

CVE-2023-28198

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3. Processing web content may lead to arbitrary code execution...

CVE-2023-28198

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3. Processing web content may lead to arbitrary code execution...

CVE-2023-32358

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3. Processing web content may lead to arbitrary code execution...

Apple macOS Ventura Resource Management Error Vulnerability

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13.3, which stems from the handling of Web content may lead to arbitrary code execution...

Apple iOS and iPadOS Security Vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS prior to 16.4 and iPadOS prior to 16.4, which originates from processing web conten...

SEMCMS File Upload Vulnerability

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. A file upload vulnerability exists in SEMCMS version 3.9, which stems from the application's lack of effective validation of uploaded files and can be exploited by an attacker to run arbitrary code via...

CVE-2023-38597

A flaw was found in WebKitGTK. This issue occurs when processing malicious web content, which may lead to arbitrary code execution...

CVE-2023-38600

A flaw was found in WebKitGTK. This issue occurs when processing malicious web content, which may lead to arbitrary code execution...

CVE-2023-38594

A flaw was found in WebKitGTK. This issue occurs when processing malicious web content, which may lead to arbitrary code execution...

CVE-2023-37511

If certain App Transport Security ATS settings are set in a certain manner, insecure loading of web content can be achieved...

Code injection

If certain App Transport Security ATS settings are set in a certain manner, insecure loading of web content can be achieved...

CVE-2023-37511

The CVE refers to an information disclosure vulnerability in HCL Traveler To Do (the iOS/iPadOS companion for HCL Notes To Do) caused by a flaw in App Transport Security (ATS) settings, enabling insecure loading of web content. Multiple sources (CNVD/CNNVD/CVE records) describe the issue as stemm...

CVE-2023-37511 HCL Traveler To Do is affected by App Transport Security (ATS) settings allowing insecure loads in web content

If certain App Transport Security ATS settings are set in a certain manner, insecure loading of web content can be achieved...

CVE-2023-37511 HCL Traveler To Do is affected by App Transport Security (ATS) settings allowing insecure loads in web content

If certain App Transport Security ATS settings are set in a certain manner, insecure loading of web content can be achieved...

CVE-2023-39437

SAP business One allows - version 10.0, allows an attacker to insert malicious code into the content of a web page or application and gets it delivered to the client, resulting to Cross-site scripting. This could lead to harmful action affecting the Confidentiality, Integrity and Availability of...

SAP business One allows 跨站脚本漏洞

SAP Business One is a set of enterprise management software from SAP. The software includes functions such as financial management, operations management and human resource management. SAP business One suffers from a cross-site scripting vulnerability that originates from malicious code that can ...