Lucene search
K

156 matches found

OSV
OSV
added 2026/01/29 12:42 a.m.2 views

CGA-4558-P3JF-W979

Bulletin has no description...

7.7CVSS5.8AI score0.0154EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.2 views

MiracleLinux 7 : mailman-2.1.15-30.el7 (AXSA:2020-4558:01)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2020-4558:01 advisory. mailman: Cross-site scripting vulnerability allows malicious listowners to inject scripts into listinfo pages CVE-2018-0618 mailman: Mishandled URLs...

6.5CVSS5.7AI score0.00725EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/19 12:0 a.m.5 views

MiracleLinux 4 : httpd-2.2.15-28.0.1.AXS4 (AXSA:2013-442:03)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-442:03 advisory. The Apache HTTP Server is a powerful, efficient, and extensible web server. Security issues fixed with this release: CVE-2012-3499 Multiple cross-sit...

5.1CVSS8.3AI score0.58223EPSS
Exploits4References4
OpenVAS
OpenVAS
added 2025/11/17 12:0 a.m.2 views

Mageia: Security Advisory (MGASA-2025-0291)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.8AI score0.03683EPSS
Exploits1References6
OSV
OSV
added 2025/07/07 1:29 p.m.1 views

CLSA-2025-1751894976 webkit2gtk3: Fix of 4 CVEs

Update to 2.44.4 - CVE-2023-42950: fix a use after free issue - CVE-2024-27851: fix processing maliciously crafted web content may lead to arbitrary code execution - CVE-2024-27820: fix processing web content may lead to arbitrary code execution - CVE-2024-4558: fix use after free in ANGLE...

9.6CVSS7AI score0.03683EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:0 a.m.3 views

TencentOS Server 3: webkit2gtk3 (TSSA-2024:1154)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:1154 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

9.8CVSS8AI score0.03683EPSS
Exploits1References20
OpenVAS
OpenVAS
added 2025/05/26 12:0 a.m.8 views

Fedora: Security Advisory (FEDORA-2024-58de5ad94f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.6CVSS6.5AI score0.03683EPSS
Exploits1References9
RedhatCVE
RedhatCVE
added 2025/05/23 12:18 a.m.3 views

CVE-2022-4558

A vulnerability was found in Alinto SOGo up to 5.7.1. It has been classified as problematic. This affects an unknown part of the file SoObjects/SOGo/NSString+Utilities.m of the component Folder/Mail Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack...

6.1CVSS6.1AI score0.0027EPSS
Exploits0References1
Circl
Circl
added 2025/05/12 4:42 a.m.22 views

CVE-2025-4558

creationtimestamp| type| source ---|---|--- 2025-05-12 04:42:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lox5s424au2r 2025-05-12 06:30:18+00:00| seen| Telegram/OjKWAIIwmaRdPKLgzIo36KSzAdhbVpvO7Ot8l8jiIttDY 2025-05-12 08:35:13+00:00| seen| https://t.me/cvedetector/25065...

9.8CVSS4.8AI score0.00588EPSS
Exploits0References2
NVD
NVD
added 2025/05/12 4:15 a.m.25 views

CVE-2025-4558

The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password to log into the system...

9.8CVSS0.00588EPSS
Exploits0References2
AlpineLinux
AlpineLinux
added 2025/05/12 3:8 a.m.5 views

CVE-2025-4558

The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password to log into the system...

9.8CVSS9.8AI score0.00588EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2024-4558

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

9.6CVSS7.5AI score0.03683EPSS
Exploits1References3
OSV
OSV
added 2024/11/19 4:1 p.m.20 views

RLSA-2024:9636 Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: Use after free in ANGLE CVE-2024-4558 webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash CVE-2024-40789 webkitgtk:...

9.8CVSS8.6AI score0.03683EPSS
Exploits1References15
Tenable Nessus
Tenable Nessus
added 2024/11/17 12:0 a.m.14 views

Oracle Linux 8 : webkit2gtk3 (ELSA-2024-9636)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-9636 advisory. 2.46.3-1 - Update to 2.46.3 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

9.8CVSS7.2AI score0.03683EPSS
Exploits1References15
RedHat Linux
RedHat Linux
added 2024/11/14 3:34 p.m.32 views

Important: Red Hat Security Advisory: webkit2gtk3 security update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update ...

9.8CVSS7.7AI score0.03683EPSS
Exploits8References18
RedHat Linux
RedHat Linux
added 2024/11/14 12:21 p.m.41 views

Important: Red Hat Security Advisory: webkit2gtk3 security update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update ...

9.8CVSS7.7AI score0.03683EPSS
Exploits8References19
RedHat Linux
RedHat Linux
added 2024/11/14 10:17 a.m.25 views

Important: Red Hat Security Advisory: webkit2gtk3 security update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

9.8CVSS7.4AI score0.03683EPSS
Exploits1References15
Tenable Nessus
Tenable Nessus
added 2024/11/14 12:0 a.m.11 views

Fedora 40 : webkit2gtk4.0 (2024-8f88cdf4e5)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-8f88cdf4e5 advisory. Update to 2.46.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

9.6CVSS7.1AI score0.03683EPSS
Exploits1References5
AlmaLinux
AlmaLinux
added 2024/11/14 12:0 a.m.31 views

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: chromium-browser: Use after free in ANGLE CVE-2024-4558 webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash CVE-2024-40789 webkitgtk:...

9.8CVSS8.3AI score0.03683EPSS
Exploits1References30
OpenVAS
OpenVAS
added 2024/11/04 12:0 a.m.15 views

SUSE: Security Advisory (SUSE-SU-2024:3870-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.6CVSS8.4AI score0.03683EPSS
Exploits7References6
Rows per page
Query Builder