42 matches found
SUSE: Security Advisory (SUSE-SU-2021:0583-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for webkit2gtk3 (openSUSE-SU-2021:0376-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Ubuntu 18.04 LTS / 20.04 LTS : WebKitGTK vulnerability (USN-4739-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4739-1 advisory. A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website...
CVE-2020-13558
A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1. A specially crafted web page can lead to a use after free...
CVE-2020-13558
A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1. A specially crafted web page can lead to a use after free...
CVE-2020-13558
The CVE-2020-13558 entry concerns WebKitGTK/WebKit2GTK 2.30.1 where AudioSourceProviderGStreamer contains a use-after-free that can be triggered by processing crafted web content, potentially allowing arbitrary code execution. Connected advisories confirm affected products and fixes: Debian lists...
OPENSUSE-SU-2021:0376-1 Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.30.5 bsc1182286: + Bring back the WebKitPluginProcess installation that was removed by mistake. + Fix RunLoop objects leaked in worker threads. + Fix aarch64 llint build with JIT disabled. + Use Internet Explorer quirk fo...
Security update for webkit2gtk3 (important)
openSUSE Security Update: Security update for webkit2gtk3 Announcement ID: openSUSE-SU-2021:0376-1 Rating: important References: 1182286 Cross-References: CVE-2020-13558 CVSS scores: CVE-2020-13558 SUSE: 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 An...
SUSE SLES15 Security Update : webkit2gtk3 (SUSE-SU-2021:0583-1)
This update for webkit2gtk3 fixes the following issues : Update to version 2.30.5 bsc1182286 : + Bring back the WebKitPluginProcess installation that was removed by mistake. + Fix RunLoop objects leaked in worker threads. + Fix aarch64 llint build with JIT disabled. + Use Internet Explorer quirk...
SUSE SLED15 / SLES15 Security Update : webkit2gtk3 (SUSE-SU-2021:0536-1)
This update for webkit2gtk3 fixes the following issues : Update to version 2.30.5 bsc1182286 : + Bring back the WebKitPluginProcess installation that was removed by mistake. + Fix RunLoop objects leaked in worker threads. + Fix aarch64 llint build with JIT disabled. + Use Internet Explorer quirk...
Debian: Security Advisory (DSA-4854-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-4854-1 : webkit2gtk - security update
The following vulnerabilities have been discovered in the webkit2gtk web engine : - CVE-2020-13558 Marcin Noga discovered that processing maliciously crafted web content may lead to arbitrary code execution. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
Ubuntu: Security Advisory (USN-4739-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for webkit2gtk3 (FEDORA-2021-ab674d56bc)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] [DSA 4854-1] webkit2gtk security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4854-1 [email protected] https://www.debian.org/security/ Alberto Garcia February 17, 2021 https://www.debian.org/security/faq -...
Fedora 33 : webkit2gtk3 (2021-ab674d56bc)
The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-ab674d56bc advisory. - A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1. A specially crafted web page c...
CVE-2019-13558
The CVE-2019-13558 vulnerability affects Advantech WebAccess (versions 8.4.1 and earlier). Root cause: improper control of generation of code (code injection) that can be triggered over the network, potentially allowing remote code execution, data exfiltration, or a system crash. The primary affe...
Advantech WebAccess
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low skill level to exploit Vendor : Advantech Equipment : WebAccess Vulnerabilities : Code Injection, Command Injection, Stack-based Buffer Overflow, Improper Authorization 2. RISK EVALUATION Successful exploitation of these...
CVE-2018-13558
Technical details (affected component, versions, root cause, and remediation) are not publicly provided in the supplied documents. Monitor for updates.
CVE-2018-13558
The mintToken function of a smart contract implementation for rhovit, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...