4157 matches found
Design/Logic Flaw
An issue was discovered in certain Apple products. Safari before 11 is affected. The issue involves the "WebKit Storage" component. It allows attackers to bypass the Safari Private Browsing protection mechanism, and consequently obtain sensitive information about visited web sites...
CVE-2017-7144
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to track Safari Private Browsing users by leveraging cookie mishandling...
CVE-2017-7144
The CVE-2017-7144 entry describes a privacy vulnerability in WebKit affecting iOS prior to 11 and Safari prior to 11, where cookie mishandling could allow remote attackers to track users in Safari Private Browsing. Connected documents confirm the affected component (WebKit) and the privacy impact...
CVE-2017-7142
An issue was discovered in certain Apple products. Safari before 11 is affected. The issue involves the "WebKit Storage" component. It allows attackers to bypass the Safari Private Browsing protection mechanism, and consequently obtain sensitive information about visited web sites...
CVE-2017-7142
CVE-2017-7142 affects Safari before 11 due to a flaw in the WebKit Storage component that can bypass Safari Private Browsing and leak information about visited sites. Connected sources confirm the issue resides in WebKit/Private Browsing handling and is associated with Safari and WebKit Storage. ...
CVE-2017-7142
An issue was discovered in certain Apple products. Safari before 11 is affected. The issue involves the "WebKit Storage" component. It allows attackers to bypass the Safari Private Browsing protection mechanism, and consequently obtain sensitive information about visited web sites...
PT-2017-17537
Name of the Vulnerable Software and Affected Versions Safari versions prior to 11 Description The issue involves the WebKit Storage component and allows attackers to bypass the Safari Private Browsing protection mechanism, obtaining sensitive information about visited web sites. Recommendations F...
CVE-2017-7142: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in certain Apple products. Safari before 11 is affected. The issue involves the "WebKit Storage" component. It allows attackers to bypass the Safari Private Browsing protection mechanism, and consequently obtain sensitive information about visited web sites...
Apple Safari WebKit Storage Information Disclosure Vulnerability
Apple Safari is a web browser developed by Apple, Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. An information disclosure vulnerability exists in the WebKit Storage component in Apple Safari versions prior to 11. An attacker can exploit this vulnerability...
PT-2017-17539
Name of the Vulnerable Software and Affected Versions iOS versions prior to 11 Safari versions prior to 11 Description The issue involves the WebKit component and allows remote attackers to track Safari Private Browsing users by leveraging cookie mishandling. Recommendations For iOS versions prio...
Multiple Plugins - jQueryFileTree - Unauthenticated Path Traversal
Since no authentication or authorisation checks for direct access to the jqueryFileTree.php are made, the vulnerability allows for browsing the file system on a host out of an unauthenticated context. Even though no file content can be exfiltrated this way, "hidden" files e.g. in the web...
Event ID: 0 & Event ID:1 - Citrix Store cannot be created or added
Unable to create or add a store. Event ID: 0 & Event ID:1 Checking the event viewer on the Storefront server gives the following events- Also, unable to browse an existing store. "The webpage cannot be found."...
Microsoft SharePoint Server CVE-2017-8629 Remote Privilege Escalation Vulnerability
Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attackers may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microso...
Code injection
qt5-qtwebkit before 5.4 records private browsing URLs to its favicon database, WebpageIcons.db...
CVE-2015-8079
qt5-qtwebkit before 5.4 records private browsing URLs to its favicon database, WebpageIcons.db...
UBUNTU-CVE-2015-8079
qt5-qtwebkit before 5.4 records private browsing URLs to its favicon database, WebpageIcons.db...
CVE-2015-8079
qt5-qtwebkit before 5.4 records private browsing URLs to its favicon database, WebpageIcons.db...
CVE-2015-8079
qt5-qtwebkit before 5.4 records private browsing URLs to its favicon database, WebpageIcons.db...
CVE-2015-8079
CVE-2015-8079 affects qt5-qtwebkit before 5.4, where private browsing URLs are recorded to the favicon database WebpageIcons.db. Connected sources corroborate that this logging vulnerability existed in QtWebKit and was addressed in a SUSE security update (SUSE-SU-2016:2397-1) which mentions an ad...