Lucene search
+L

7508 matches found

OSV
OSV
added 2021/12/25 1:15 a.m.10 views

CVE-2021-45483

In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different vulnerability than CVE-2021-30889...

6.5CVSS8.6AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/12/25 1:15 a.m.5 views

CVE-2021-45483

In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different vulnerability than CVE-2021-30889...

6.5CVSS6.6AI score0.01413EPSS
SaveExploits1References3
Prion
Prion
added 2021/12/25 1:15 a.m.36 views

Design/Logic Flaw

In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different vulnerability than CVE-2021-30889...

4.3CVSS7.2AI score0.01932EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
added 2021/12/25 1:15 a.m.28 views

CVE-2021-45483

In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different vulnerability than CVE-2021-30889...

6.5CVSS6.7AI score0.01413EPSS
SaveExploits1References2
OSV
OSV
added 2021/12/25 1:15 a.m.6 views

UBUNTU-CVE-2021-45483

In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different vulnerability than CVE-2021-30889...

6.5CVSS6.6AI score0.01413EPSS
SaveExploits1References3
CVE
CVE
added 2021/12/25 12:3 a.m.223 views

CVE-2021-45483

WebKitGTK (WebKitGTK/WebKitGTK4) before 2.32.4 contains a use-after-free in WebCore::Frame::page (CVE-2021-45483). The Astra Linux advisories reference this CVE as a separate WebKitGTK issue from CVE-2021-30889. Remediation is to upgrade WebKitGTK to 2.32.4 or later (as reflected in the related a...

6.5CVSS7.2AI score0.01413EPSS
SaveExploits1References2Affected Software1
AlpineLinux
AlpineLinux
added 2021/12/25 12:3 a.m.51 views

CVE-2021-45483

In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different vulnerability than CVE-2021-30889...

6.5CVSS7.6AI score0.01413EPSS
SaveExploits1
CNNVD
CNNVD
added 2021/12/25 12:0 a.m.4 views

WebKitGTK 资源管理错误漏洞

WebKitGTK is a full-featured port of the WebKit rendering engine for projects that require any type of web integration, from hybrid HTML/CSS applications to full-fledged web browsers. It provides the full functionality of WebKit for a wide range of systems from desktop computers to embedded syste...

6.5CVSS6.6AI score0.01413EPSS
SaveExploits1References8
OSV
OSV
added 2021/12/22 7:15 p.m.6 views

CVE-2021-40418

When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property containing an object referring to a UUID that was parsed from a frame within the video container. Upon destruction of the object that owns it, the...

9.8CVSS6.2AI score0.17945EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2021/12/22 12:0 a.m.8 views

PT-2021-7224 · Freebsd · Freebsd

Name of the Vulnerable Software and Affected Versions: FreeBSD affected versions not specified Description: The 802.11 beacon handling routine failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer. While a FreeBSD Wi-Fi client is in scanning mode, a...

9.8CVSS7.7AI score0.0362EPSS
SaveExploits0References22
CNNVD
CNNVD
added 2021/12/16 12:0 a.m.10 views

Cybele Software Thinfinity VirtualUI 安全漏洞

Cybele Software Thinfinity VirtualUI is a solution from Cybele Software that supports embedding remote Windows applications into standard Web applications, allowing two-way interaction with Javascript programming. A security vulnerability exists in Cybele Software Thinfinity VirtualUI versions...

9.8CVSS8.4AI score0.39973EPSS
SaveExploits3References5
CNVD
CNVD
added 2021/12/09 12:0 a.m.50 views

TP-Link AX10 has an unspecified vulnerability

TP-Link AX10 is a router from Tp-link, China. TP-Link AX10 has a security vulnerability that could be exploited to disconnect a connected wireless client by sending a spoofed authentication frame specific to the wireless adapter...

7.8CVSS1.8AI score0.022EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/08 10:15 p.m.2 views

DEBIAN-CVE-2021-38503

The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such as executing scripts or navigating the top-level frame. This vulnerability affects Firefox 94, Thunderbird 91.3, and Firefox ESR 91.3...

10CVSS8.4AI score0.0383EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/12/07 12:0 a.m.21 views

JetBrains TeamCity Access Control Error Vulnerability (CNVD-2022-09214)

JetBrains TeamCity is a distributed build management and continuous integration tool from Czech company JetBrains Jetbrains. The tool provides continuous unit testing, code quality analysis, and build issue analysis reports.JetBrains TeamCity has an access control error vulnerability that stems...

9.8CVSS2.4AI score0.01052EPSS
SaveExploits0References1
OSV
OSV
added 2021/11/30 4:15 p.m.5 views

CVE-2021-43202

In JetBrains TeamCity before 2021.1.3, the X-Frame-Options header is missing in some cases...

9.8CVSS5.8AI score0.01052EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/30 4:15 p.m.20 views

CVE-2021-43202

In JetBrains TeamCity before 2021.1.3, the X-Frame-Options header is missing in some cases...

9.8CVSS0.01052EPSS
SaveExploits0References1
Prion
Prion
added 2021/11/30 4:15 p.m.25 views

Design/Logic Flaw

In JetBrains TeamCity before 2021.1.3, the X-Frame-Options header is missing in some cases...

7.5CVSS9.3AI score0.01052EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/11/30 3:21 p.m.55 views

CVE-2021-43202

CVE-2021-43202 affects JetBrains TeamCity prior to 2021.1.3, where the X-Frame-Options header is missing in some responses, enabling potential clickjacking. Impact is described as security header absence with high-severity scores (NVD CVSSv3.1: 9.8, base). Remediation: upgrade to TeamCity 2021.1....

9.8CVSS9.4AI score0.01052EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/11/30 3:21 p.m.20 views

CVE-2021-43202

In JetBrains TeamCity before 2021.1.3, the X-Frame-Options header is missing in some cases...

9.7AI score0.01052EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/11/24 1:15 a.m.6 views

CVE-2021-28707

PoD operations on misaligned GFNs This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. x86 HVM and PVH guests may be started in populate-on-demand PoD mode, to provide a way for them to later easily have more memory assigne...

8.8CVSS5.5AI score0.00348EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder