5937 matches found
Cross site scripting
XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 because a server's suggestedfilename is used as the pdfname value in PDF.js...
Cross site scripting
XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an error page...
CVE-2021-45088
XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an error page...
CVE-2021-45086
XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 because a server's suggestedfilename is used as the pdfname value in PDF.js...
CVE-2021-45085
XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-about:overview when a user visits an XSS payload page often enough to place that page on the Most Visited list...
UBUNTU-CVE-2021-45085
XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an about: page, as demonstrated by ephy-about:overview when a user visits an XSS payload page often enough to place that page on the Most Visited list...
CVE-2021-45087
XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 when View Source mode or Reader mode is used, as demonstrated by a a page title...
UBUNTU-CVE-2021-45088
XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an error page...
CVE-2021-45086
CVE-2021-45086 affects GNOME Web (Epiphany) where a server-provided suggested_filename is used as the pdf_name value in PDF.js, enabling XSS. Affected versions include GNOME Web before 40.4 and 41.x before 41.1; exploitation details and in-the-wild status are not shown in the provided documents. ...
CVE-2021-45086
XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 because a server's suggestedfilename is used as the pdfname value in PDF.js...
CVE-2021-45086
XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 because a server's suggestedfilename is used as the pdfname value in PDF.js...
CVE-2021-45086
XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 because a server's suggestedfilename is used as the pdfname value in PDF.js...
CVE-2021-45087
XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 when View Source mode or Reader mode is used, as demonstrated by a a page title...
CVE-2021-45087
CVE-2021-45087 affects GNOME Web (Epiphany). The vulnerability arises when using View Source mode or Reader mode, allowing an XSS payload via the page title. Affected component is Epiphany/GNOME Web; root cause is improper handling in those modes leading to script execution. Impact is XSS under t...
CVE-2021-45087
XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 when View Source mode or Reader mode is used, as demonstrated by a a page title...
CVE-2021-45087
XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 when View Source mode or Reader mode is used, as demonstrated by a a page title...
CVE-2021-45088
XSS can occur in GNOME Web aka Epiphany before 40.4 and 41.x before 41.1 via an error page...
CVE-2021-45088
CVE-2021-45088 is an XSS vulnerability in GNOME Web (Epiphany) exploitable via an error page, affecting Epiphany/GNOME Web up to versions before 40.4 and 41.x before 41.1. Connected sources confirm this CVE as part of multiple GNOME/Epiphany XSS issues and indicate Debian/Mageia advisories with f...