Lucene search
+L

14078 matches found

Github Security Blog
Github Security Blog
added 2022/05/17 1:56 a.m.15 views

Webkit PDFs for TYPO3 allows remote attackers to execute arbitrary commands

Unspecified vulnerability in the Webkit PDFs webkitpdf extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors...

7.5CVSS8.1AI score0.01862EPSS
SaveExploits0References6Affected Software1
Positive Technologies
Positive Technologies
added 2022/05/16 12:0 a.m.6 views

PT-2022-3417 · Apple +8 · Ipados +13

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 15.5 Apple iPadOS versions prior to 15.5 Apple macOS versions prior to 12.4 Apple Safari versions prior to 15.5 Apple tvOS versions prior to 15.5 Apple watchOS versions prior to 8.6 Description: A memory corruption...

10CVSS8.5AI score0.06701EPSS
SaveExploits1References139
Positive Technologies
Positive Technologies
added 2022/05/16 12:0 a.m.6 views

PT-2022-7003 · Apple +9 · Webkit +14

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.5 iPadOS versions prior to 15.5 macOS Monterey versions prior to 12.4 tvOS versions prior to 15.5 watchOS versions prior to 8.6 Description: A use after free issue was addressed with improved memory management. This...

10CVSS7.7AI score0.06701EPSS
SaveExploits1References133
CNNVD
CNNVD
added 2022/05/16 12:0 a.m.8 views

Apple tvOS 缓冲区错误漏洞

Apple tvOS is an operating system for Smart TVs from Apple. Apple tvOS suffers from a buffer error vulnerability that stems from a boundary error in WebKit's handling of HTML content. A remote attacker could trick a victim into visiting a specially crafted website, trigger a memory corruption, an...

8.8CVSS8.7AI score0.00911EPSS
SaveExploits0References28
CNNVD
CNNVD
added 2022/05/16 12:0 a.m.4 views

Apple tvOS 缓冲区错误漏洞

Apple tvOS is an operating system for Smart TVs from Apple. Apple tvOS suffers from a buffer error vulnerability that stems from a boundary error in WebKit's handling of HTML content. A remote attacker could trick a victim into visiting a specially crafted website, trigger a memory corruption, an...

8.8CVSS8.7AI score0.00869EPSS
SaveExploits0References29
CNNVD
CNNVD
added 2022/05/16 12:0 a.m.4 views

Apple tvOS 缓冲区错误漏洞

Apple tvOS is a smart TV operating system from Apple, Inc. A buffer error vulnerability exists in tvOS versions 15.0 19J346 - 15.4.1 19L452, which stems from a boundary error when processing HTML content in WebKit. A remote attacker could exploit this vulnerability to execute arbitrary code on th...

8.8CVSS8.6AI score0.01309EPSS
SaveExploits0References31
CNNVD
CNNVD
added 2022/05/16 12:0 a.m.3 views

Apple tvOS 资源管理错误漏洞

Apple tvOS is an operating system for Smart TVs from Apple. Apple tvOS suffers from a resource management error vulnerability that originates from a post-release reuse error in WebKit when processing HTML content. A remote attacker could trick a victim into visiting a specially crafted website,...

8.8CVSS8.5AI score0.01424EPSS
SaveExploits0References30
Positive Technologies
Positive Technologies
added 2022/05/16 12:0 a.m.6 views

PT-2022-3415 · Apple +8 · Ipados +14

Name of the Vulnerable Software and Affected Versions: Apple tvOS versions prior to 15.5 Apple iOS versions prior to 15.5 Apple iPadOS versions prior to 15.5 Apple watchOS versions prior to 8.6 Apple macOS Monterey versions prior to 12.4 Apple Safari versions prior to 15.5 Description: A memory...

10CVSS8.5AI score0.06701EPSS
SaveExploits1References138
Apple
Apple
added 2022/05/16 12:0 a.m.903 views

About the security content of Safari 15.5

About the security content of Safari 15.5 This document describes the security content of Safari 15.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

8.8CVSS9.8AI score0.01424EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/05/16 12:0 a.m.3 views

PT-2022-2641 · Apple +8 · Macos Monterey +17

Name of the Vulnerable Software and Affected Versions: Apple Safari versions prior to 15.5 Apple tvOS versions prior to 15.5 Apple watchOS versions prior to 8.6 Apple iOS versions prior to 15.5 Apple iPadOS versions prior to 15.5 Apple macOS Monterey versions prior to 12.4 Apple iTunes for Window...

10CVSS8.4AI score0.06701EPSS
SaveExploits1References148
CNNVD
CNNVD
added 2022/05/16 12:0 a.m.4 views

Apple tvOS 资源管理错误漏洞

Apple tvOS is a smart TV operating system from Apple, Inc. A resource management error vulnerability exists in Apple tvOS versions 15.0 19J346 - 15.4.1 19L452, which originates from a use-after-release error when processing HTML content in WebKit. A remote attacker could exploit this vulnerabilit...

8.8CVSS7.9AI score0.00844EPSS
SaveExploits0References29
CNNVD
CNNVD
added 2022/05/16 12:0 a.m.4 views

Apple tvOS 资源管理错误漏洞

Apple tvOS is a smart TV operating system from Apple, Inc. A resource management error vulnerability exists in Apple tvOS versions 15.0 19J346 - 15.4.1 19L452, which originates from a use-after-release error when processing HTML content in WebKit. A remote attacker could exploit this vulnerabilit...

8.8CVSS7.9AI score0.00844EPSS
SaveExploits0References29
OSV
OSV
added 2022/05/13 1:19 a.m.100 views

GHSA-5P4H-3377-7W67 golang.org/x/net/html NULL Pointer Dereference vulnerability

The html package aka x/net/html before 2018-07-13 in Go mishandles "in frameset" insertion mode, leading to a "panic: runtime error" for html.Parse of , , or . This is related to HTMLTreeBuilder.cpp in WebKit...

7.5CVSS7.4AI score0.02774EPSS
SaveExploits1References12
Github Security Blog
Github Security Blog
added 2022/05/13 1:19 a.m.26 views

golang.org/x/net/html NULL Pointer Dereference vulnerability

The html package aka x/net/html before 2018-07-13 in Go mishandles "in frameset" insertion mode, leading to a "panic: runtime error" for html.Parse of , , or . This is related to HTMLTreeBuilder.cpp in WebKit...

7.5CVSS1.2AI score0.02774EPSS
SaveExploits1References12Affected Software1
GitLab Advisory Database
GitLab Advisory Database
added 2022/05/13 12:0 a.m.76 views

NULL Pointer Dereference

The html package aka x/net/html before 2018-07-13 in Go mishandles "in frameset" insertion mode, leading to a "panic: runtime error" for html.Parse of , , or . This is related to HTMLTreeBuilder.cpp in WebKit...

7.5CVSS1.2AI score0.02774EPSS
SaveExploits1References12Affected Software1
GitLab Advisory Database
GitLab Advisory Database
added 2022/05/13 12:0 a.m.58 views

NULL Pointer Dereference

The html package aka x/net/html before 2018-07-13 in Go mishandles "in frameset" insertion mode, leading to a "panic: runtime error" for html.Parse of , , or . This is related to HTMLTreeBuilder.cpp in WebKit...

7.5CVSS1.2AI score0.02774EPSS
SaveExploits1References12Affected Software1
RedHat Linux
RedHat Linux
added 2022/05/10 1:27 p.m.4 views

webkitgtk: Memory corruption issue leading to arbitrary code execution

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 15, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution...

8.8CVSS6.8AI score0.02319EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2022/05/10 1:27 p.m.4 views

webkitgtk: logic issue was addressed with improved state management

A logic issue was found in WebKitGTK and WPE WebKit. This flaw allows a remote attacker to process unexpected cross-origin attacks...

8.8CVSS5.8AI score0.00656EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2022/05/08 12:0 a.m.25 views

Fedora: Security Advisory for chromium (FEDORA-2022-59297c8fcd)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.6CVSS7.3AI score0.16488EPSS
SaveExploits14References4
Fedora
Fedora
added 2022/05/07 5:11 a.m.56 views

[SECURITY] Fedora 36 Update: chromium-100.0.4896.127-1.fc36

Chromium is an open-source web browser, powered by WebKit Blink...

9.6CVSS1.8AI score0.16488EPSS
SaveExploits14
Rows per page
Query Builder