WebKit JSC fails to increase the reference count in BindingNode::bindValue.
6f55d86c5f6b50d0002bcd10d39bf19ba832cfb70f168f4c10bd7447be36f502WebKit suffers from a universal cross site scripting vulnerability via ContainerNode::parserRemoveChild (2).
964166bf7e2aad87ca87f9fbd636f508b2feacc79ea9718481f8a478a086c262The WebKit #1110 patch created a universal cross site scripting vulnerability.
f9fa2419890bbf932fea7ee2144168cc1b45cb651c941ddb77002892c3f97bb8Samba version 3.5.0 remote code execution exploit. Written in python.
82b78ac677f3c508a31ba7663a45618d965a4a0c22eb9bc613387514f11039b3Apple MacOS suffers from a local elevation of privilege vulnerability due to a lack of bounds checking in HIServices custom CFObject serialization.
1aa8e11c6dd2564941d452637180beeaffbdf5025cab2320d31049cd5d306643Apple iOS / OS X suffer from a NSKeyedArchiver memory corruption vulnerability due to a lack of bounds checking in CAMediaTimingFunctionBuiltin.
ca7a887d2ea998dc6250cc110e33b535fe3368bec11281aa3e5ffebf43fe2c45Apple iOS / MacOS suffers from a NSKeyedArchiver heap corruption vulnerability due to a rounding error in TIKeyboardLayout initWithCoder:.
b11e4fa749407eb6cbea1e698f70085373bb11356622dba14596a60b5ee4368bApple MacOS NSUnarchiver suffers from a heap corruption vulnerability due to lack of bounds checking in [NSBuiltinCharacterSet initWithCoder:].
e2849820975ba9e34e34473279ce9b4842b59d2332429f539fffbd8657173888Apple iOS / MacOS suffers from a memory corruption vulnerability due to bad bounds checking in NSCharacterSet coding for NSKeyedUnarchiver.
3451fa7feeddaaaa2c8d46965e2248bbefe5070ec646c6930150120ccd46f1f0Apple iOS / MacOS suffers from a kernel memory disclosure vulnerability due to lack of bounds checking in netagent socket option handling.
a80eee4e7eb6cc5d85cfca41d2804e1883748684e1c813413ad14e66a918e582Apple iOS / MacOS suffer from a kernel use-after-free vulnerability due to bad locking in unix domain socket file descriptor externalization.
d49bb5779a4c17dfcf174a09087ff899cab557acadeac924745cade61a639d0aTrend Micro ServerProtect suffers from information disclosure, manipulation, cross site request forgery, cross site scripting, and various other vulnerabilities.
8e879696170b8b1f6b2ecc8c0d882967bb47bb12e348f1e061c984909eef85dfJoomla VideoFlow extension version 1.2.0 suffers from a remote SQL injection vulnerability.
f6346ee9872949c8a92678833ae65270a5db9307b032228401ecafc0ca1e706cAlex Guestbook version 5.0.4 suffers from a cross site scripting vulnerability.
055933b640169d8875bc574472dfe2eb708ab18325639a596a789ea149c0039aInvoicePlane version 1.4.10 suffers from cross site scripting and remote file upload vulnerabilities.
f9f183d34c1ada4b03e2201ee13c0c22983f6fc241dde0d1f28ffdf8da86a993Simple ASC CMS version 1.2 suffers from a cross site scripting vulnerability.
ca4ddb7798dee2ffb269324504f52117e33584bdf4bd32a0c994b17007d0b4aeKDE versions 4 and 5 suffer from a KAuth privilege escalation vulnerability.
c554a74a267c52aca3ad742178547b8d2a015c7f0cd8cbcdba5e0a178a1d4c91HTTrack version 3.x suffers from a stack buffer overflow vulnerability.
2bcbb8ef516f46d2cef284aeb94ca91a4f7f07005d73d65830c62b8a987b454aWordPress Newsletter Supsystic plugin version 1.1.7 suffers from a cross site scripting vulnerability.
6ecae5adcbf95d5c69fe28fba37fe9ca3a5692158857b6244cf28b09cc5acde3This Metasploit module exploits a stack-based buffer overflow vulnerability in the web interface of VX Search Enterprise v9.5.12, caused by improper bounds checking of the request path in HTTP GET requests sent to the built-in web server. This Metasploit module has been tested successfully on Windows 7 SP1 x86.
5199a2e5cc5662ac54e66b7146c5c6b94ee41102ab904bac8eb917c52c3801dcSure Thing Disc Labeler version 6.2.138.0 suffers from a buffer overflow vulnerability.
8a2edb1c1c0c32c18f1e6f48be84549d2c5b62d50ede9d6deb02b44bd03e7f8dThis is an issue on MacOS that allows un-entitled root to read kernel frame pointers, which might be useful in combination with a kernel memory corruption bug.
63b9107547c0985f1def098507f1151fbb6c1ccacb4c0d361b420aa17ff32d51LG has an issue where a malformed OGM file can cause the use of an uninitialized pointer during Vorbis header verification - vorbis_info_clear is called on a vorbis_info structure that has not previously been initialised by a call to vorbis_info_init.
afdfbc4dd8683cc760fb99fd28315f8ac51c68ca61a0fb1a2f850952b9060614MacOS suffers from a kernel register leak via 32-bit syscall exit.
51f21ee396efaec54ab768abeb7493566d5a0076bced42dd49e3ff6f228e0a09Mantis Bug Tracker versions 1.3.10 and 2.3.0 suffer from a cross site request forgery vulnerability.
657f51bab66ce5d5cf6800d27e2f3bc584ea834cf9cbd98479d947434a3b0ead
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed