Lucene search
+L

2964 matches found

osv_alsa
osv_alsa
•added 2024/10/16 12:00 a.m.•45 views

ALSA-2024:8180 Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution CVE-2024-40776 webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash...

9.8CVSS8.6AI score0.01148EPSS
SaveExploits0References24
AlmaLinux
AlmaLinux
•added 2024/10/16 12:00 a.m.•59 views

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution CVE-2024-40776 webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash...

9.8CVSS8.7AI score0.01148EPSS
SaveExploits0References24
Tenable Nessus
Tenable Nessus
•added 2024/10/16 12:00 a.m.•40 views

RHEL 9 : webkit2gtk3 (RHSA-2024:8180)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8180 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkit: malicious website may...

9.8CVSS8.2AI score0.01533EPSS
SaveExploits1References38
Debian
Debian
•added 2024/10/14 9:53 p.m.•26 views

[SECURITY] [DSA 5792-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5792-1 [email protected] https://www.debian.org/security/ Alberto Garcia October 14, 2024 https://www.debian.org/security/faq -...

6.5CVSS7.3AI score0.00933EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2024/10/14 12:00 a.m.•30 views

Debian dsa-5792 : gir1.2-javascriptcoregtk-4.0 - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5792 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5792-1 [email protected] https://www.debian.org/securit...

6.5CVSS7.3AI score0.00933EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2024/10/02 3:09 a.m.•10 views

SUSE CVE-2024-9391

A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full screen mode. This may allow spoofing of other sites as the address bar is no longer visible. This bug only affects Firefox Focus for Android. Other versions of Firefox are...

7.1CVSS8.4AI score0.0028EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2024/10/01 7:10 p.m.•30 views

CVE-2024-9391

A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the issue as follows: A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full-screen mode. This may allow spoofing of other sites as the address bar is no...

7.1CVSS6.6AI score0.0028EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2024/10/01 4:15 p.m.•17 views

CVE-2024-9391

A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full screen mode. This may allow spoofing of other sites as the address bar is no longer visible. This bug only affects Firefox Focus for Android. Other versions of Firefox are...

6.5CVSS7.1AI score0.0028EPSS
SaveExploits0References2
NVD
NVD
•added 2024/10/01 4:15 p.m.•29 views

CVE-2024-9391

A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full screen mode. This may allow spoofing of other sites as the address bar is no longer visible. This bug only affects Firefox Focus for Android. Other versions of Firefox are...

6.5CVSS0.0028EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2024/10/01 4:15 p.m.•30 views

UBUNTU-CVE-2024-9391

A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full screen mode. This may allow spoofing of other sites as the address bar is no longer visible. This bug only affects Firefox Focus for Android. Other versions of Firefox are...

6.5CVSS7AI score0.0028EPSS
SaveExploits0References5
CVE
CVE
•added 2024/10/01 3:13 p.m.•314 views

CVE-2024-9391

The Firefox Focus for Android browser (versions prior to 131) is vulnerable to a flaw where a specially crafted web page can prevent a user from exiting full-screen mode . This can lead to spoofing other sites because the address bar becomes hidden. While the initial description specifies Firefox...

6.5CVSS6.3AI score0.0028EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2024/10/01 12:00 a.m.•19 views

PT-2024-7792

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 131 Firefox Focus for Android versions prior to 131 Description A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full screen mode. This may allow spoofing...

10CVSS6.6AI score0.10609EPSS
SaveExploits0References255
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/01 12:00 a.m.•7 views

CVE-2024-9391: Authentication Bypass by Spoofing

A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full screen mode. This may allow spoofing of other sites as the address bar is no longer visible. This bug only affects Firefox Focus for Android. Other versions of Firefox are...

6.5CVSS6.4AI score0.0028EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/09/23 12:00 a.m.•25 views

Mozilla Firefox for Android Spoofing Vulnerability (CNVD-2024-40513)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A spoofing vulnerability exists in Mozilla Firefox for Android, which stems from the system's failure to appropriately handle destination jumps, and can be exploited by an attacker to spoof the content...

6.1CVSS6.3AI score0.07562EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/09/17 1:15 p.m.•8 views

CVE-2024-8897

Under certain conditions, an attacker with the ability to redirect users to a malicious site via an open redirect on a trusted site, may be able to spoof the address bar contents. This can lead to a malicious site to appear to have the same URL as the trusted site. This bug only affects Firefox f...

6.1CVSS5.6AI score0.07562EPSS
SaveExploits0References2
NVD
NVD
•added 2024/09/17 1:15 p.m.•45 views

CVE-2024-8897

Under certain conditions, an attacker with the ability to redirect users to a malicious site via an open redirect on a trusted site, may be able to spoof the address bar contents. This can lead to a malicious site to appear to have the same URL as the trusted site. This bug only affects Firefox f...

6.1CVSS0.07562EPSS
SaveExploits0References2
Mend
Mend
•added 2024/09/17 12:21 p.m.•11 views

CVE-2024-8897

Under certain conditions, an attacker with the ability to redirect users to a malicious site via an open redirect on a trusted site, may be able to spoof the address bar contents. This can lead to a malicious site to appear to have the same URL as the trusted site. This bug only affects Firefox f...

6.1CVSS0.07562EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/09/17 12:21 p.m.•43 views

CVE-2024-8897

Under certain conditions, an attacker with the ability to redirect users to a malicious site via an open redirect on a trusted site, may be able to spoof the address bar contents. This can lead to a malicious site to appear to have the same URL as the trusted site. This bug only affects Firefox f...

0.07562EPSS
SaveExploits0References2
NVD
NVD
•added 2024/09/17 12:15 a.m.•38 views

CVE-2024-40866

The issue was addressed with improved UI. This issue is fixed in Safari 18, macOS Sequoia 15. Visiting a malicious website may lead to address bar spoofing...

6.5CVSS0.00933EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2024/09/17 12:15 a.m.•41 views

CVE-2024-40866

The issue was addressed with improved UI. This issue is fixed in Safari 18, macOS Sequoia 15. Visiting a malicious website may lead to address bar spoofing...

6.5CVSS5.7AI score
SaveExploits0References5
Rows per page
Query Builder