Lucene search
+L

2367 matches found

AlmaLinux
AlmaLinux
added 2024/10/16 12:00 a.m.49 views

Important: webkit2gtk3 security update

WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: webkit2gtk: Use after free may lead to Remote Code Execution CVE-2024-40776 webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash...

9.8CVSS8.7AI score0.01157EPSS
SaveExploits0References24
Tenable Nessus
Tenable Nessus
added 2024/10/16 12:00 a.m.32 views

RHEL 9 : webkit2gtk3 (RHSA-2024:8180)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8180 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkit: malicious website may...

9.8CVSS8.2AI score0.01533EPSS
SaveExploits1References38
Debian
Debian
added 2024/10/14 9:53 p.m.22 views

[SECURITY] [DSA 5792-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5792-1 [email protected] https://www.debian.org/security/ Alberto Garcia October 14, 2024 https://www.debian.org/security/faq -...

6.5CVSS7.3AI score0.00933EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/10/14 12:00 a.m.20 views

Debian dsa-5792 : gir1.2-javascriptcoregtk-4.0 - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5792 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5792-1 [email protected] https://www.debian.org/securit...

6.5CVSS7.3AI score0.00933EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2024/10/02 3:09 a.m.5 views

SUSE CVE-2024-9391

A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full screen mode. This may allow spoofing of other sites as the address bar is no longer visible. This bug only affects Firefox Focus for Android. Other versions of Firefox are...

7.1CVSS8.4AI score0.0028EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2024/10/01 7:10 p.m.25 views

CVE-2024-9391

A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the issue as follows: A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full-screen mode. This may allow spoofing of other sites as the address bar is no...

7.1CVSS6.6AI score0.0028EPSS
SaveExploits0References5
NVD
NVD
added 2024/10/01 4:15 p.m.24 views

CVE-2024-9391

A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full screen mode. This may allow spoofing of other sites as the address bar is no longer visible. This bug only affects Firefox Focus for Android. Other versions of Firefox are...

6.5CVSS0.0028EPSS
SaveExploits0References2
OSV
OSV
added 2024/10/01 4:15 p.m.7 views

CVE-2024-9391

A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full screen mode. This may allow spoofing of other sites as the address bar is no longer visible. This bug only affects Firefox Focus for Android. Other versions of Firefox are...

6.5CVSS7.1AI score0.0028EPSS
SaveExploits0References2
OSV
OSV
added 2024/10/01 4:15 p.m.14 views

UBUNTU-CVE-2024-9391

A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full screen mode. This may allow spoofing of other sites as the address bar is no longer visible. This bug only affects Firefox Focus for Android. Other versions of Firefox are...

6.5CVSS7AI score0.0028EPSS
SaveExploits0References5
CVE
CVE
added 2024/10/01 3:13 p.m.281 views

CVE-2024-9391

CVE-2024-9391: A bug in Firefox Focus for Android could prevent exiting full-screen mode on a specially crafted page, potentially enabling spoofing since the address bar is hidden. Affected: Firefox Focus for Android; Firefox versions before 131. Documented remediation: update to the latest Firef...

6.5CVSS6.3AI score0.0028EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/10/01 12:00 a.m.16 views

PT-2024-7792

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 131 Firefox Focus for Android versions prior to 131 Description A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full screen mode. This may allow spoofing...

10CVSS8.9AI score0.09348EPSS
SaveExploits0References255
CNVD
CNVD
added 2024/09/23 12:00 a.m.17 views

Mozilla Firefox for Android Spoofing Vulnerability (CNVD-2024-40513)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A spoofing vulnerability exists in Mozilla Firefox for Android, which stems from the system's failure to appropriately handle destination jumps, and can be exploited by an attacker to spoof the content...

6.1CVSS6.3AI score0.07562EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/17 1:15 p.m.4 views

CVE-2024-8897

Under certain conditions, an attacker with the ability to redirect users to a malicious site via an open redirect on a trusted site, may be able to spoof the address bar contents. This can lead to a malicious site to appear to have the same URL as the trusted site. This bug only affects Firefox f...

6.1CVSS5.6AI score0.07562EPSS
SaveExploits0References2
NVD
NVD
added 2024/09/17 1:15 p.m.35 views

CVE-2024-8897

Under certain conditions, an attacker with the ability to redirect users to a malicious site via an open redirect on a trusted site, may be able to spoof the address bar contents. This can lead to a malicious site to appear to have the same URL as the trusted site. This bug only affects Firefox f...

6.1CVSS0.07562EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/09/17 12:21 p.m.34 views

CVE-2024-8897

Under certain conditions, an attacker with the ability to redirect users to a malicious site via an open redirect on a trusted site, may be able to spoof the address bar contents. This can lead to a malicious site to appear to have the same URL as the trusted site. This bug only affects Firefox f...

0.07562EPSS
SaveExploits0References2
OSV
OSV
added 2024/09/17 12:15 a.m.28 views

CVE-2024-40866

The issue was addressed with improved UI. This issue is fixed in Safari 18, macOS Sequoia 15. Visiting a malicious website may lead to address bar spoofing...

6.5CVSS5.7AI score
SaveExploits0References5
OSV
OSV
added 2024/09/17 12:15 a.m.3 views

DEBIAN-CVE-2024-40866

The issue was addressed with improved UI. This issue is fixed in Safari 18, macOS Sequoia 15. Visiting a malicious website may lead to address bar spoofing...

6.5CVSS7.1AI score0.00933EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/17 12:15 a.m.27 views

CVE-2024-40866

The issue was addressed with improved UI. This issue is fixed in Safari 18, macOS Sequoia 15. Visiting a malicious website may lead to address bar spoofing...

6.5CVSS0.00933EPSS
SaveExploits0References5
OSV
OSV
added 2024/09/17 12:15 a.m.18 views

UBUNTU-CVE-2024-40866

The issue was addressed with improved UI. This issue is fixed in Safari 18, macOS Sequoia 15. Visiting a malicious website may lead to address bar spoofing...

6.5CVSS7.3AI score0.00933EPSS
SaveExploits0References4
Mozilla
Mozilla
added 2024/09/17 12:00 a.m.41 views

Security Vulnerabilities fixed in Firefox for Android 130.0.1 — Mozilla

Under certain conditions, an attacker with the ability to redirect users to a malicious site via an open redirect on a trusted site, may be able to spoof the address bar contents. This can lead to a malicious site to appear to have the same URL as the trusted site.This bug only affects Firefox fo...

6.1CVSS6.3AI score0.07562EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder